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(57) In a case of a transaction with high security us- 
ing a transfer device (2), a deposited amount is trans- 
ferred from a first purse (first purse area (1 A)) of an IC 
card (1) to a second purse (second purse area (1B)) 



through personal authorization by using a code number, 
and in a case of a transaction with low security through 
a device in the user's side, personal authorization is not 
required, and an amount of money for payment is exe- 
cuted with the second purse of the IC card. 
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Description 

FIELD OF THE INVENTION 

[0001] The present invention relates to an electronic 
purse system for handling electronic cash with an IC 
card, an IC card for the same, an IC card transaction 
apparatus having a double-structured purse, an IC card 
transaction system having a double-structured purse, 
and an IC card for the same. 

BACKGROUND OF THE INVENTION 

[0002] In recent years, there has become widespread 
an IC card with a rewritable and non-volatile memory as 
well as a microcomputer incorporated therein, and on 
the other hand, there have been proposed various types 
of "electronic purse system" in which a transaction with 
a bank and a purchase of commodities at shops can be 
performed with an IC card-formed carrier body by trans- 
ferring some of a deposited amount of a bank account 
to this IC card between financial institutions. 
[0003] In a conventional type of electronic purse sys- 
tem, one unit of purse is generally provided in an IC card, 
to which a desired amount of money is transferred 
through a terminal, or from which payment is made 
through a terminal. In addition, a high security function 
' is generally added to the electronic purse of the IC card 
to enhance the securities, and for this reason there have 
been a delay in operations and a delay in processing 
when the processing for a transaction is actually exe- 
cuted. 

[0004] Especially, in a case of the conventional type 
of electronic purse system, if any external device ac- 
cesses one memory area in the IC card, so-called the 
processing for verification is executed in which a code 
number of a card holder is verified inside the card and 
authorized, then identification code of the device is in- 
putted, whether the device is allowed to access the 
memory area or not is checked, and the access to the 
area is eventually allowed after all of the processing are 
finished. 

[0005] Also, to enhance the security, when informa- 
tion is transferred between an IC card and a terminal, 
the information is ciphered and transferred, and as a 
method of ciphering the information, there is employed 
what is called the authorization processing in which a 
device and an IC card each have a public key or a secret 
key respectively and cipher the information after the 
keys are exchanged therebetween for each time when 
the transaction processing is executed in some cases. 
As this ciphering system, there are systems such as the 
RSA system and the DES system in which a device and 
an I C card have key information in common use, or sys- 
tems in which a device and an IC card have a public key 
or a secret key respectively and cipher or de-cipher in- 
formation transmitted in a common algorithm, which are 
generally employed. On the other hand, the way of using 



an I C card is considered in many occasions. The I C card 
is used in various cases such as a POS (Point Of Sale) 
system for ordinary shops and super markets or the like, 
a medical card system for hospitals, an amusement sys- 
s tern for amusement places such as a place for pachinko 
(a pinball game), a betting system such as a horse rac- 
ing, a ticket system for public telephone units and trans- 
portation or the like. 

[0006] A similar technology to the above technology 
io js disclosed, for instance, in Japanese Patent Laid- 
Open Publication No. HEI 2-205933. According to this 
Publication, there is disclosed a system in which an IC 
card is used for cashless payment when commodity is 
purchased at vending machines or shops. More specif- 
ically, a prepaid area and an area for an off-line account 
are provided in a memory of the I C card used in the sys- 
tem. The prepaid area is used for storing therein balance 
for transactions in cash with the balance by using a PIN 
(Personal Identification Number). The off-line account 
area is used for storing therein balance as an off-line 
account for transferring the balance to the prepaid area 
by using a personal authorization number to increase 
an amount of the balance in the prepaid area. 
[0007] Although various types of system linked to an 
electronic purse system are proposed in the convention- 
al types of IC card system as that in the publication cited 
above, access to a memory in any of the systems is pos- 
sible from one electronic purse provided in the I C card 
only when a code number is successfully verified 
through specified authorization processing or specified 
verification processing using a PIN or the like. However, 
countermeasures for security against a case where an 
IC card is illegally obtained by an unauthorized person 
is enhanced by the encryption technology, so that there 
are some problems as described below in linking the 
electronic purse system to some other systems. 
[0008] At first, it is required to provide an entry func- 
tion for executing the authorization processing or verifi- 
cation processing in each device used in the IC card sys- 
tem, and for this reason the configuration of the device 
has become complicated because of the concerns for 
security. 

[0009] In addition, any algorithm and key or the like 
for ciphering information commonly used in the system 
on the whole are known by holders of the devices or 
those concerned with the software such as the people 
for handling the devices used in each IC card system. 
With this feature, if any holder intentionally commits il- 
legality, the access to the whole system may become 
possible, and for this reason, it is impossible to maintain 
the security. Accordingly, there is the. possibility that an 
illegal transaction with a large amount of money may 
occur in the whole system, so that using a card in a wide 
area or a multi-use of one card is not preferable consid- 
ering the aspect of the security. 

[001 0] Also, from a user's point of view, operations are 
troublesome because entry of a code number is re- 
quired any time when the device is used by entering a 
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PIN for transaction like in the Publication (Japanese Pat- 
ent Laid-Open Pubfication No. HEI 2-205993) or the like. 
The processing for verification as described above is ex- 
ecuted in the system, sothatquitea longtime is required 
for the processing until the transaction is actually fin- 
ished. As described above, if an unnecessarily long time 
for transaction is required, use of the card for transaction 
is not preferred in urgent cases such as a case of busy 
hou rs in super markets, a case of purchasing tickets just 
before some horse race starts in a betting system, or a 
case of purchasing tickets right before some train de- 
parts in the ticket vending system. 
[0011] When the card is used in some amusement 
place, there is the problem such as that, even if a user 
previously decides in his or her mind how much is to be 
used on that day, all his (her) money in the purse may 
eventually be spent before being aware of it, but as far 
as the current system is concerned, it is impossible to 
restrict an amount of money to be used in the electronic 
purse because the system allows all amount of money 
in the electric purse to be used. 

[001 2] It is a first object of the present invention to pro- 
vide an electronic purse system having a double-struc- 
tured purse in which convenience in use as a prepaid 
card is improved in a purse with lower security and the 
security is further improved in a purse with higher secu- 
rity by making use of the characteristics as a double- 
structured purse for an IC card. 

[001 3] It is a second object of the present invention to 
provide a double-structured purse, namely an IC card 
applicable to the electronic purse system providing the 
first object. 

[0014] It is a third object of the present invention to 
provide an IC card transaction apparatus having a dou- 
ble-structured purse in which the security on the IC card 
as a double-structured purse can further be improved. 
[0015] It is a fourth object of the present invention to 
provide an IC card transaction system having a double- 
structured purse enabling realization of card transac- 
tions in which the convenience in use as a prepaid card 
is improved in a purse with lower security and the secu- 
rity is further improved in a purse with higher security by 
making use of the characteristics as a double-structured 
purse (IC card). 

[001 6] It is a fifth object of the present invention to pro- 
vide an double-structured purse, namely an IC card ap- 
plicable to the IC card transaction system providing the 
fourth object. 

[0017] In order to solve the problems and achieve 
each of the objects, the electronic purse system having 
a double-structured purse according to the present in- 
vention comprises a portable type of card-formed carrier 
body comprising a first rewritable and non-volatile mem- 
ory in turn having a first area in which a first deposited 
amount is stored and a second area in which a second 
deposited amount is stored, a processor connected to 
the memory, a second non-volatile memory with an op- 
eration program for the processor stored therein, and 



an I/O terminal for accessing information stored in the 
first and second non -volatile memories respectively via 
the processor, in which at least an individual's authori- 
zation number of a card holder in response to the first 

5 area of the first non-volatile memory is stored in the first 
non-volatile memory, identification information indicat- 
ing types of apparatuses allowing, in response to the 
second area of the first non-volatile memory, access to 
the second area is stored in the first non-volatile mem- 

io ory, when accessing the first area, ciphered information 
received from the I/O terminal is de-ciphered, access is 
permitted if a code number included in the de-ciphered 
information and the individual's authorization number 
stored in the first non-volatile memory satisfy a prespec- 

15 ified relation, and when accessing the second area, ac- 
cess to the second area is permitted if an identification 
number indicating a type of accessible transaction ap- 
paratus coincides with that stored in the first non-volatile 
memory; a central system having an account file with 

20 deposited amounts stored therein; a withdrawing ma- 
chine directly or indirectly communicating with the cen- 
tral system for transferring all or a portion of a deposited 
amount in the central system to the first area of the mem- 
ory in the card-lormed carrier body, which ciphers at 

25 least either one of identification information for the ap- 
paratus and a code number inputted by the card holder 
and transfers the ciphered information or number to the 
card-formed carrier body; an input unit for inputting a 
code number and a amount of money to be transferred 

30 from the first area to the second area in the card-formed 
carrier body; a transfer unit for supplying the code 
number, amount of money to be transferred, and iden- 
tification information inputted by the input unit to the 
card-formed carrier body; and a device in the user's side 

35 for transmitting an amount of money used and the ap- 
paratus information to use a deposited amount stored 
in the second area of the card-formed carrier body; and 
the card-formed carrier body updates the first area, 
when transfer is instructed by the transfer unit and the 

40 individual's authorization number is accepted, by sub- 
tracting a specified amount of money from the deposited 
amount stored in the first area, and also writes the spec- 
ified amount of money in the second area, and allows, 
when an amount of money to be used is instructed from 

45 the device in the user's side and at the same time access 
to the second area is permitted according to the identi- 
fication information, use of the instructed amount of 
money with the device in the user's side by subtracting 
the amount of money to be used. 

so [0018] With the electronic purse system having a dou- 
ble-structured purse according to the present invention, 
in a case of a transaction using the transfer unit, a de- 
posited amount is transferred from the first area (first 
purse) of the card-formed carrier body to the second ar- 

55 ea (second purse) through personal authorization with 
the code number, and in a case of a transaction using 
the device in the user's side, an amount of money to be 
used is used in the second area of the card-formed car- 
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rier body without requiring the personal authorization, 
so that characteristics as a double-structured purse are 
made use of, and for this reason convenience in use as 
a prepaid card can be improved in a purse with lower 
security, on the other hand, the security can further be 
improved in a purse with higher security. 
[0019] In the electronic purse system having a dou- 
ble-structured purse according to the present invention, 
a program making the second area allow only the with- 
drawal processing may be stored in the second non -vol- 
atile memory of the card-formed carrier body. 
[0020] In the electronic purse system having a dou- 
ble-structured purse according to the present invention, 
identification information for a device in the user's side 
and a code number each allowing access to a third area 
are registered in the third area provided in the card- 
formed carrier body, and addition or subtraction in the 
third area may be allowed when identification informa- 
tion and a code number corresponding to registered in- 
formation are received from the device in the user's side. 
[0021] In the electronic purse system having a dou- 
ble-structured purse according to the present invention, 
identification information indicating the device in the us- 
er's side subjected to addition and an amount of added 
money may be stored as historical information in the 
third area of the card-formed carrier body. 
[0022] In the electronic purse system having a dou- 
ble-structured purse according to the present invention, 
the card-formed carrier body skips, when the device in 
the user's side demands payment without specifying 
any area in the first non-volatile memory, the processing 
for de-ciphering the transferred information from the de- 
vice in the user's side, and allows transaction for sub- 
tracting information on the specified amount of money 
from the second deposited amount. 
[0023] With the electronic purse system having a dou- 
ble-structured purse according to the present invention, 
when the device in the user's side demands payment 
without specifying any area, it is possible to realize, by 
using a deposited amount in the second area, a simple 
and less-secured transaction which does not require 
personal authorization. 

[0024] The IC card applicable to an electronic purse 
system having a double-structured purse according to 
the present invention comprises a memory in which a 
first purse with a first amount of money stored therein, 
a second purse with a second amount of money stored 
therein, a payment processing program, and a user's 
code number program are stored; a processing circuit 
for executing payment processing according to the pay- 
ment processing program stored in the memory; a com- 
municating unit for executing communications with ex- 
ternal devices; and the payment program executes pay- 
ment processing according to the second amount of 
money stored in the second purse when a payment 
command is received from an external payment de- 
manding device without any purse being specified, and 
verifies the code and executes the payment processing 
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to the external device according to the amount of money 
stored in the first purse when a payment command 
based on specification of the first purse is received. 
[0025] With the IC card applicable to an electronic 

5 purse system having a double-structured purse accord- 
ing to the present invention, when no purse is specified 
from an external device, payment is executed according 
to the second amount of money stored in the second 
purse, and when the first purse is specified from an ex- 

10 temal device, payment with the first purse is executed 
after a code number is verified, so that much expense 
in time and effort such that a code number needs to be 
verified for the second purse with lower security is omit- 
ted so that convenience in use can be improved, and at 

is the same time the first purse with higher security can be 
prevented from illegal access by requiring personal au- 
thorization. 

[0026] The IC card applicable to an electronic purse 
system having a double-structured purse according to 

20 the present invention comprises a memory in which a 
first purse with a first amount of money stored therein, 
a second purse with a second amount of money stored 
therein, a payment processing program, and an cipher- 
ing/de-ciphering program are stored; a processing cir- 

25 cuit for executing payment processing according to the 
payment processing program stored in the memory; a 
communicating unit for executing communications with 
external devices; and an interface unit for managing in- 
terlace with external transaction devices; and the pay- 

30 ment program executes the payment processing ac- 
cording to the second amount of money stored in the 
second purse when a payment command not based on 
specification of the first purse is received via the inter- 
face unit from an external device, and communicates 

35 with the external device using the ciphering and de-ci- 
phering program and executes the payment processing 
to the external device according to the amount of money 
stored in the first purse when a payment command 
based on specification of the first purse is received. 

40 [0027] With the IC card applicable to an electronic 
purse system having a double-structured purse accord- 
ing to the present invention, when no purse is specified 
from an external device, payment is executed according 
to the second amount of money stored in the second 

45 purse, and when the first purse is specified from an ex- 
ternal device, payment with the first purse is executed 
through ciphering and de-ciphering the information, so 
that much expense in time and effort such that a code 
number needs to be verified for the second purse with 

50 lower security is omitted, and for this reason conven- 
ience in use can be improved and at the same time a 
function of preventing illegal access can further be im- 
proved in the first purse with higher security by using 
ciphered information. 

55 [0028] The IC card transaction apparatus according 
to the present invention selects either one of an amount 
of money stored in an IC card and an amount of money 
stored in a center account and executes payment in 
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cash according to the selected amount of money; and 
the apparatus comprises a detecting unit for detecting 
insertion of an IC card; an accepting unit for accepting 
specification of an arbitrary mode after insertion of the 
IC card is detected by the detecting unit; and a mode 
switching unit for switching from the center account to 
a mode for payment in cash when specification of an 
arbitrary mode is not accepted in the accepting unit with- 
in a preset period of time after insertion of the IC card 
is detected. 

[0029] With the I C card transaction apparatus accord- 
ing to the present invention, in a transaction between a 
transaction apparatus and an IC card, when specifica- 
tion of an arbitrary mode is accepted within a preset pe- 
riod of time, using a center account is allowed, and when 
the specification is not accepted, the mode is switched 
to payment in cash, so that a transaction through a cent- 
er account has variations in modes, and simplification 
of the transaction in cash can be realized by omitting 
operations required for specifying the transaction in 
cash. 

[0030] The transaction apparatus according to the 
present invention executes transaction with an IC card 
having a first purse and a second purse, and the trans- 
action apparatus executes transaction making use of 
the amount of money stored in the second purse, when 
a demand for payment is received based on specifica- 
tion of the first purse, if it is turned out, after the demand 
for payment is authorized according to the ciphered in- 
formation and code number, that the amount of money 
stored in the first purse is less than the amount of money 
required for the transaction. 

[0031] With transaction apparatus according to the 
present invention, in a transaction requiring personal 
authorization between a transaction apparatus and an 
IC card, the transaction is executed again by making use 
of an amount of money in the second purse even if the 
transaction is not performed only through the first purse 
because of shortage of an amount of money therein, so 
that a user can execute a transaction without being con- 
cerned about an amount of money for the transaction, 
and for this reason improvement in the operability can 
be achieved. 

[0032] The IC card applicable to an IC card transac- 
tion system according to the present invention has a f irst 
purse and a second purse and is used for transaction 
making use of the double-structured purse consisting of 
the first purse and second purse with the transaction ap- 
paratus, and when a code number is received from the 
transaction apparatus, the processing for authorizing 
the individual is executed with the received code 
number and amounts of money to be stored in the first 
and second purses respectively are outputted to the 
transaction apparatus, and on the other hand, when a 
code number is not received from the transaction appa- 
ratus, an amount of money for the second purse is out- 
putted to the transaction apparatus. 
[0033] With the IC card applicable to an I C card trans- 



action system according to the present invent bn, in a 
transaction between a transaction apparatus and an IC 
card, amounts of money for the first and the second 
purses are outputted to the transaction apparatus only 

5 when the personal authorization is executed, and if not, 
only an amount of money for the second purse is out- 
putted to the transaction apparatus, so that the first 
purse with high security can be prevented from being 
opened unless the information can pass through the op- 

10 erations for the personal authorization even if a trans- 
action is such a small one that contents of the purse is 
let to know to a transaction apparatus for an inquiry or 
the like. 

[0034] Other objects and features of this invention will 
15 become understood from the following description with 
reference to the accompanying drawings. 

BRIEF DESCRIPTION OF THE DRAWINGS 

20 [0035] 

Fig. 1 is a block diagram showing one example of 
the electronic purse system according to Embodi- 
ment of the present invention; 
2S Fig. 2 is a block diagram functionally showing the 
IC card shown in Fig. 1 ; 

Fig. 3 is a block diagram showing hardware of the 
IC card shown in Fig. 1; 

Figs. 4A and 4B are views each showing an exam- 
30 pie of the memory configuration of the IC card 
shown in Fig. 3; 

Fig. 5 is a block diagram functionally showing the 

withdrawing machine shown in Fig. 1 ; 

Fig. 6 is a view of configuration schematically show- 

35 ing the central system shown in Fig. 1 ; 

Fig. 7 is a block diagram functionally showing the 
device in the user's side shown in Fig. 1 ; 
Fig. 8 is a flow chart for explaining the main opera- 
tions of the IC card according to Embodiment of the 

40 present invention; 

Fig. 9 is a flow chart for explaining the main opera- 
tions of the IC card according to Embodiment of the 
present invention; 

Fig. 10 is a flow chart lor explaining the transfer 
45 processing in the main operations shown in Fig. 8; 
Fig. 11 is a flow chart tor explaining the transfer 
processing in the main operations shown in Fig. 8; 
Fig. 12 is a flow chart for explaining the payment 
processing in the main operations shown in Fig. 8; 
so Fig. 13 is a flow chart for explaining the payment 
processing in the main operations shown in Fig. 8; 
Fig. 1 4 is a flow chart for explain in*g additional trans- 
action in the processing for payment shown in Fig. 
12; 

55 Fig. 1 5 is a flow chart for explaining the card deposit 
processing in the main operations shown in Fig. 8; 
Fig. 1 6 is a flow chart for explaining the card deposit 
processing in the main operations shown in Fig. 8; 
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Fig. 1 7 is a flow chart for explaining the processing 
for de-ciphering in Embodiment of the present in- 
vention; 

Fig. 18 is a flow chart for explaining the processing 
for ciphering in Embodiment of the present inven : s 
tion; 

Fig. 1 9 is a flow chart for explaining the preprocess- 
ing in Embodiment of the present invention; 
Fig. 20 is a flow chart for explaining the preprocess- 
ing in Embodiment of the present invention; 10 
Fig. 21 is a block diagram showing an example of 
configuration of an ordinary transaction machine 
which is an example of the device in the user's side 
in Embodiment of the present invention; 
Fig. 22 is a block diagram showing an example of is 
configuration of an ordinary transaction telephone 
unit which is an example of the device in the user's 
side in Embodiment ot the present invention; 
Fig. 23 is a flow chart for explaining operations for 
a transaction between the ordinary transaction ma- 20 
chine shown in Fig. 21 and the IC card; 
Fig. 24 is a flow chart for explaining operations for 
a transaction between the ordinary transactbn ma- 
chine shown in Fig. 21 and the tC card; 
Fig. 25 is a flow chart for explaining operations for 2s 
a transaction between the ordinary transaction ma- 
chine shown in Fig. 21 and the IC card ; 
Fig. 26 is a flow chart for explaining the operations 
for transaction between the ordinary transaction tel- 
ephone unit shown in Fig. 22 and an iC card; 30 
Fig. 27 is a flow chart for explaining the operations 
for transaction between the ordinary transaction tel- 
ephone unit shown in Fig. 22 and an IC card; 
Fig. 28 is a flow chart for explaining the operations 
for transaction between the ordinary transaction tel- 35 
ephone unit shown in Fig. 22 and an IC card; 
Fig. 29 is a flow chart for explaining operations for 
a transaction between the withdrawing machine 
and the IC card in Embodiment of the present in- 
vention; 40 
Fig. 30 is a flow chart for explaining operations for 
a transaction between the withdrawing machine 
and the IC card in Embodiment of the present in- 
vention; 

Fig. 31 is a flow chart for explaining operations for 
a transaction between the withdrawing machine 
and the IC card in Embodiment of the present in- 
vention; 

Fig. 32 is a flow chart for explaining operations for 
a transaction between the withdrawing machine so 
and the IC card in Embodiment of the present in- 
vention; 

Fig. 33 is a view showing one example of a display 
screen during the operations for a transaction by the 
withdrawing machine in Embodiment of the present 55 
invention; 

Fig. 34 is a block diagram showing an example of 
configuration of the ATM as one example of the 



withdrawing machine in Embodiment of the present 
invention; 

Fig. 35 is a flow chart for explaining operations for 
atransaction between the ATM shown in Fig. 34 and 
the IC card; 

Fig. 36 is a flow chart for explaining operations for 
a transaction between the ATM shown in Fig. 34 and 
the IC card; 

Fig. 37 is a flow chart for explaining operations for 
a transaction between the ATM shown in Fig. 34 and 
the IC card; 

Figs. 38A to 38E are views each showing one ex- 
ample of a display screen during the operations for 
a transaction by the ATM in Embodiment of the 
present invention; and 

Figs. 39A to 39D are views each showing one ex- 
ample of a display screen during the operations for 
a transaction by the ATM in Embodiment of the 
present invention. 

- DESCRIPTION OF THE PREFERRED EMBODIMENT 

[0036] Detailed description is made hereinafter for the 
electronic purse system having a double-structured 
purse according to the present invention, the IC card ap- 
plicable to the electronic purse system, the IC card 
transaction apparatus having the double-structured 
purse, the IC card transaction system having the dou- 
ble-structured purse, and the IC card applicable to the 
IC card transaction system with reference to the accom- 
panying drawings. 

[0037] At first, description is made for the system con- 
figuration. Fig. 1 is a block diagram showing one exam- 
ple of the electronic purse system (including the I C card 
transaction system) according to Embodiment of the 
present invention. The electronic purse system shown 
in Fig. 1 comprises an IC card 1 , a withdrawing machine 
2 which is a transaction apparatus with the IC card 1 , a 
device in the user's side 4 which is a transaction appa- 
ratus with the IC card 1 , and a central system 3. 
[0038] The IC card 1 has a function of a double-struc- 
tured purse consisting of a first purse 1 A with higher se- 
curity requiring a code number (indicating a PIN) and 
encryption for a transaction and a second purse 1 B with 
lower security not requiring a code number nor encryp- 
tion for a transaction: The withdrawing machine 2 has 
an IC card removably inserted thereinto and stores a 
deposited amount withdrawn through communications 
with a central system 3 of a bank or the like in the first 
purse 1 A of the IC card 1 . 

[0039] The central system 3 majiages deposited 
amounts for users as a bank does and executes with- 
drawal of the deposited amounts through communica- 
tions with equipment such as the withdrawing machine 
2. The device in the user's side 4 has the configuration 
in which an IC card can freely be inserted thereto or re- 
moved therefrom, and provides various types of service 
corresponding to an amount of money stored in the sec- 
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ond purse 1 B of the IC card. 

[0040] Next detailed description is made for the IC 
card 1 . At first, description is made for the principle. Fig. 

2 is a block diagram functionally showing the IC card 1 
shown in Fig. 1 . The IC card 1 shown in Fig. 2 provides 
therein, as a function, a demanded area identifying sec- 
tion 11, a de-ciphering security processing section 12, 
a code number processing section 13, a verification 
processing section 14, an access right authentication 
processing section 15, and a transaction processing 
section 16. 

[0041] The demanded area identifying section 11 
identifies, when an ICcardl is inserted into the terminal, 
whether the IC card demands an area of the first purse 
1 A or of the second purse 1 B, or demands no area. This 
demanded area identifying section 1 1 shifts, when no 
area is demanded, the processing to the verification 
processing section 14. The de-ciphering security 
processing section 1 2 de-ciphers, when it is identified 
by the demanded area identifying section 11 that either 
of the areas is demanded, ciphered information re- 
ceived from the terminal with a de-ciphering key. 
[0042] The code number processing section 13 exe- 
cutes the processing for personal authorization accord- 
ing to a code number. The verification processing sec- 
tion 14 verifies whether the terminal with the IC card 1 
inserted therein is a terminal from which access is al- 
lowed or not. The access right authentication process- 
ing section 15 authenticates whether the terminal has 
the access right or not from a result of verification. The 
transaction processing section 16 executes a transac- 
tion with the service terminal after it is confirmed that 
the terminal has the access right. 
[0043] Next description is made for hardware config- 
uration that realizes the principle of the IC card 1. Fig. 

3 is a block diagram showing hardware of the IC card 1 
shown in Fig. 1 . The IC card 1 shown in Fig. 3 comprises 
a terminal 101 for connecting thereto a service terminal, 
an interlace (l/F) 102 for managing interface between 
the service terminal and the inside of the IC card, a CPU 

103, a ROM 104, a RAM 105, an EE PROM 106 or the 
like. 

[0044] The CPU 1 03 provides controls over the entire 
processing according to a program stored in the ROM 

104. The ROM 104 stores therein the program accord- 
ing to the flow charts shown in Fig. 8 to Fig. 1 7 described 
later. The RAM 105 is used as a work area of the CPU 
103. 

[0045] The EE PROM 106 is a non -volatile memory 
and has a first purse area 1 06 A and a second purse area 
106B used for realizing each function of the first purse 
1 A and second purse 1B each described above, and a 
third purse area 106C used for recording historical in- 
formation of transactions with service terminals. 
[0046] Next description is made for the construction 
of a double-structured purse of the IC card. Figs. 4A and 
4B are views each showing an example of memory con- 
figuration of the IC card 1 shown in Fig. 3. The double- 



structured purse of the I C card 1 is formed with the first 
purse area 1 06A and the second purse area 1 06B. More 
specifically, the EEPROM 106 ot the IC card 1 is divided 
into a directory area shown in Fig. 4 A and a information 

5 area shown in Fig. 4B. 

[0047] The directory area comprises, as shown in Fig. 
4A, a first directory D1 of the first purse area 106A, a 
second directory D2 of the second purse area 1 06B, and 
a third directory D3 of the third purse area 106C. 

10 [0048] The first directory D1 comprises an address 
(first purse address) of the first purse area 106A, a code 
number as a PIN for security in demanding, and a pair 
of a machine ID of a service terminal and an access right 
of the machine. In the example shown in Fig. 4A, the 

15 first purse address is in a range from "F001 to F00F", 
the code number is "1234", and the machine IDs and 
access rights are arbitrarily set corresponding to service 
terminals #1 and #2, respectively. The access right in- 
cludes rights for writing, reading, updating, and deleting 

20 or the like. 

[0049] The second directory D2 comprises an ad- 
dress (second purse address) of the second purse area 
106B, a code number for making the setting free, and a 
pair of a machine ID of a service terminal and an access 

25 right of the machine. In the example shown in Fig. 4A, 
the second purse address is in a range from °F011'to 
F01 F°, the code number is Free, and the machine ID 
and access right are arbitrarily set corresponding to a 
service terminal. 

30 [0050] The third directory D3 comprises an address 
(third purse address) of the third purse area 106C, a 
code number as a PI N for security in demanding, and a 
pair of a machine ID of a service terminal and an access 
right of the machine. In the example of Fig. 4A, the third 

35 purse address is in a range from "F021 to F02F 0 , the 
code number is "1 234°, and the machine I Ds and access 
rights are arbitrarily set corresponding to service termi- 
nals #1 and #2. 

[0051] Then, the information area shown in Fig. 4B is 

40 divided into the first purse area 106A, the second purse 
area 106B, the third purse area 106C, and information 
on center accounts as additional information. 
[0052] Concerning the first purse area 1 06A, an area 
is identified according to the first purse address ot the 

45 first directory D1, in which balance as the first purse is 
stored. Concerning the second purse area 106B, an ar- 
ea is identified according to the second purse address 
of the second directory D2, in which balance as the sec- 
ond purse is stored. Concerning the third purse area 

so 106C, an area is identified according to the third purse 
address of the third directory D3, in which a total amount 
of the first purse and the second purse and historical 
information of transactions (transaction dates, transac- 
tion machine IDs, amounts of money for transactions) 

55 or the like are stored. It should be noted that information 
such as account numbers in the central system 3 is in- 
cluded in the center account information. 
[0053] Next detailed description is made for the with- 
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drawing machine 2 shown in Fig. T. Fig. 5 is a block di- 
agram functionally showing the withdrawing machine 2 
shown in Fig. 1 . The withdrawing machine 2 shown in 
Fig. 5 comprises a machine identifying (ID) register 21, 
an authorization transfer processing section 22, an ci- 
phering processing section 23, and an entry section 24. 
[0054] The machine ID register 21 stores therein ma- 
chine I Ds each allocated tor each machine so that an 
IC card 1 can identify the machine. The authorization 
transfer processing section 22 executes authorization 
according to a code number as well as to an amount of 
money to be withdrawn when a deposited amount is 
withdrawn from the central system 3 and transfers the 
amount of money to be withdrawn to the ciphering 
processing section 23. The ciphering processing sec- 
tion 23 ciphers the machine ID stored in the machine ID 
register 21 as well as a code number inputted by the 
entry section 24 and sends the ciphered information to 
the IC card 1 . The entry section 24 enters therein a code 
number and an amount of money to be withdrawn 
through manual operations by a user and sends the en- 
try information to the authorization transfer processing 
section 22. 

[0055] Next detailed description is made for the cen- 
tral system 3 shown in Fig. 1 . Fig. 6 is a view of config- 
uration schematically showing the central system 3 
shown in Fig. 1 . The central system 3 shown in Fig. 6 
comprises a host computer 31 connected to the with- 
drawing machine 2 or the like through a line and a da- 
tabase 32 for storing therein information on accounts of 
depositors. 

[0056] The host computer 31 accesses the database 
32 and executes processing for withdrawing a sum of 
money from a deposited amount from the withdrawing 
machine 2 or the like. The database 32 is accessed from 
the host computer 31 and executes processing for with- 
drawing a portion or all of the deposited amount from a 
specified account according to the demand from the 
host computer 31. 

[0057] Next detailed description is made for the de- 
vice in the user's side 4 shown in Fig. 1 . Fig. 7 is a block 
diagram functionally showing the device in the user's 
side 4 shown in Fig. 1 . The device in the user's side 4 
shown in Fig. 7 comprises a machine ID register 41 , a 
transfer processing section 42, a payment amount gen- 
erating section 43, a transaction processing section 44, 
a receiving section 45, and a memory 46. 
[0058] The machine ID register 41 stores therein ma- 
chine IDs each allocated for each machine so that an 
IC card 1 can identify the machine. The transfer 
processing section 42 does not require authorization as 
the withdrawing machine 2 does, receives an amount of 
money for payment required for receiving service from 
the payment amount generating section 43, and trans- 
fers the amount to the IC card 1 . For this transmission, 
the ciphering processing is not executed to the informa- 
tion. The payment amount generating section 43 gen- 
erates an amount of money for payment required for re- 



ceiving service and sends the amount of money for pay- 
ment to the transfer processing section 42 as well as to 
the transaction processing section 44. 
[0059] The transaction processing section 44 exe- 
5 cutes the processing for transaction according to the 
amount of money to be paid requested for service pro- 
vision in response to the demand from the IC card 1. 
The receiving section 45 receives an amount of money 
for payment required for the service according to inser- 
tion of the IC card 1 therein, sends a report on the re- 
ception to the transaction processing section 44, and 
sends historical information on the services to the mem- 
ory 46. The memory 46 receives the historical informa- 
tion on the IC card 1 from the receiving section 45 and 
stores the received history therein. 
[0060] Next description is made operations of the 
electronic purse system. At first, description is made for 
operations of the IC card 1. Fig. 8 and Fig. 9 are flow 
charts for explaining the main operations of the IC card 
1 according to Embodiment of the present invention. It 
should be noted that it is assumed that the IC card 1 has 
been inserted in a service terminal (withdrawing ma- 
chine 2 or device in the user's side 4). 
[0061] Specifically, the IC card 1 executes, at first, 
preprocessing with a service terminal (step S101 ). This 
preprocessing is executed for checking whether the 
service terminal is a terminal in which the IC card 1 can 
be used or not through communications with the service 
terminal although the detailed description thereof is 
made later (Fig. 16 and Fig. 17). Then, a command is 
received from the service terminal (step S1 02), and de- 
termination is made as to whether an area ID demand- 
ing either the first purse area 106A or the second purse 
area 106B is included in the received command or not 
(step S103). It should be noted that, although a pair of 
information such as a machine ID and an access right 
is included in the received command, the area ID is ar- 
bitrarily set. 

[0062] In step S103, if it is determined that the area 
ID is included in the command, the processing shifts to 
step S104 : and on the other hand, if it is determined that 
the area ID is not included therein, the processing shifts 
to step S1 1 2 (Refer to Fig. 9). 

[0063] At first, when the processing shifts to step 
S1 04, the processing for reading which of the areas, the 
first purse area-106A and the second purse area 106B, 
is demanded is executed from the area ID included in 
the received command. Further, comparison is made 
between the machine ID included in the received com- 
mand and the machine ID stored in the EEPROM 106 
of the IC card 1 , and if both of the machine IDs coincide 
with each other, the processing shifts to step S106, and 
if both of the machine IDs do not coincide with each oth- 
er, this IC card 1 is regarded as invalid to the service 
terminal and the processing is invalidated (step S105). 
[0064] In step S106, a correlation between the access 
right stored together with the machine ID in the EEP- 
ROM 106 and an access right (received access) includ- 
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ed in the received command is checked. As a result, if 
it is determined that both of the access rights are corre- 
lated to each other, the processing shifts to step S107, 
and if it is determined that both of the access rights are 
not correlated to each other, this IC card is regarded as s 
invalid to access the service terminal and the processing 
is invalidated. 

[0065] In step S107, if the area read out in step S104 
is the first purse area 1 06A, then in step S1 08, the con- 
tents of the demand from the service terminal is deter- 10 
mined, and on the other hand, if it is determined that the 
area is the second purse area 106B, the processing is 
executed as other mode. 

[0066] In step S1 08, if the contents of the demand in- 
dicates transmission, the processing shifts to step S1 09 15 
and executes the processing for transmission (Refer to 
Fig. 10 and Fig. 11), if the contents thereof indicates a 
payment, the processing shifts to step S110 and exe- 
cutes the processing for payment (Refer to Fig. 12 and 
Fig. 13), and if the contents thereof indicates deposit 20 
with a card, the processing shifts to step S111 and ex- 
ecutes the processing for deposit with a card (Refer to 
Fig. 15 and Fig. 16). After any of the processing such 
as the processing for transmission, processing for pay- 
ment, or processing for deposit with a card is finished, 25 
the current processing is finished. 
[0067] Also, if the area ID is not included in the re- 
ceived command in step S103, the processing in the 
payment mode is forcefully started. At first, in step S112 
(Refer to Fig. 9), the second purse address in the sec- 30 
ond directory D2 of the EEPROM 106 is forcefully read 
out. Then, the machine ID stored in the second directory 
D2 is compared to the machine ID included in the re- 
ceived command, and if both of the machine IDs coin- 
cide with each other, the processing shifts to step S1 1 4, 35 
and if both of the machine IDs do not coincide with each 
other, this IC card is regarded as invalid to the service 
terminal and the processing is invalidated. 
[0068] In step S114 : information, namely balance 
stored in the second purse area 106B is read in from the 40 
second purse address read out in step S112. Then, the 
read-in balance in the second purse area 106B is out- 
putted to the service terminal (step S115). The service 
terminal side can learn, according to the output of this 
balance, the amount of money in the second purse. 45 
Then, a payment command including an amount to be 
demanded (an amount to be paid) is outputted to the IC 
card 1 . 

[0069] Then, when the payment command is received 
within a preset period of time from the service terminal s° 
(step S116), in step S117, an amount for payment de- 
manded by the service terminal, namely a demanded 
amount is subtracted from the balance stored in the sec- 
ond purse area 106B. The amount of money obtained 
as a result is stored in the work area W1 previously pro- ss 
vided in the RAM 105. It should be noted that, when the 
payment command is not received in step S116, the 
transaction for payment with the service terminal is re- 



garded as invalid and the processing is terminated. 
[0070] Then, if the amount of money stored in this 
work area W1 is zero or plus (step S118), the payment 
demanded by the service terminal is possibly made only 
with the second purse, so that information indicating that 
the payment is possible and the amount for payment (in- 
dicating a demanded amount) are reported to the serv- 
ice terminal (step S119). It should be noted that, when 
the amount of money in the work area W1 is minus in 
step S118, the transaction for payment with the service 
terminal is regarded as invalid and the processing is ter- 
minated. 

[0071] If there is no response, after the report is sent 
in step S1 1 9, to the report from the service terminal even 
if a preset period of time is over (step S1 20), the amount 
of money stored in the work area W1 is cleared, and the 
transaction for payment with the service terminal is re- 
garded as invalid and the processing is terminated. On 
the other hand, if the response is received from the serv- 
ice terminal within the preset period of time (step S1 20), 
reception code is received from the received response 
(step S121). 

[0072] As described above, reception of the reception 
code from the service terminal indicates that the 
processing is executed according to the payment in the 
service terminal, so that the balance in the second purse 
area 106B is updated. Namely, the amount of money in 
the work area W1 is stored in the second purse area 
106B (step S122), and at the same time the date of the 
transaction for payment is stored in the third purse area 
106C as historical information (step S123). Finally, 
transact ion -completion signature code is sent to the 
service terminal to report that the processing inside the 
IC card 1 is completed to the service terminal (step 
S124). 

[0073] Next description is made for each operation of 
the main operations. At first, description is made for the 
processing for transfer (stepS 109 in Fig. 8). Fig. 10 and 
Fig. 11 are flow charts each for explaining the transfer 
processing in the main operations shown in Fig. 8. This 
transfer processing assumes a case where the IC card 
1 is inserted in the withdrawing machine 2, and a portion 
(a demanded amount to be transferred) of the balance 
in the first purse is transferred to the second purse in 
which the balance has run out by using the withdrawing 
machine 2. Required for this transfer processing is the 
processing for ciphering/de-ciphering a code number as 
a PI N as well as other information for security of the first 
purse. 

[0074] In the transfer processing, at first an amount 
to be demanded for transfer is received from the service 
terminal, and the demanded amount for transfer is de- 
ciphered (step S1001). Then, the de-ciphered and de- 
manded amount for transfer is subtracted from the bal- 
ance stored in the first purse area 1 06A, and the amount 
of money is stored in the work area W2 previously pro- 
vided in the RAM 1 05 (step S1 002). The amount of mon- 
ey stored in this work area W2 indicates the balance in 
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the first purse assuming that the demanded amount for 
transfer has been transferred from the first purse to the 
second purse. 

[0075] This operation indicates an access to the first 
purse, and for this reason the transaction for transfer 5 
itself requires high security, so that personal authoriza- 
tion according to a code number is required. Specifically, 
a code number is demanded to the service terminal 
(step S1003). Then, the IC card is waiting for reception 
for a preset period of time until the code number is sent 
from the service terminal (step S1 004). It should be not- 
ed that, if the code number is not received even if the 
preset period of time is over, the transaction for transfer 
is terminated, which is not shown in the figure. 
[0076] Then, when the code number is received from 
the service terminal (step S1004), and if the amount of 
money stored in the work area W2 is zero or plus in step 
Si 002 (step Si 005), the code number received in step 
S1004 is de-ciphered (step S1006). On the other hand, 
if the amount of money stored in the work area W2 is 
minus (step S1005) : this transaction for transfer is re- 
garded as invalid and invalidated. 
[0077] When the code number is de-ciphered in step 
S1006, in step S1007, a code number stored in the first 
directory D1 is read out and de-ciphered. Then, verifi- 
cation is made between the de-ciphered code number 
of the IC card 1 itself and the de-ciphered code number 
received from the service terminal (step S1008), and if 
both of the code numbers coincide with each other (step 
S1009), the authorization and verification are regarded 
as valid and the processing shifts to step S1 01 0. On the 
other hand, when the authorization and verification are 
not successful, this transaction for transfer is regarded 
as invalid and invalidated. 

[0078] In step S1010, the amount of money to be 
transferred (demanded amount for transfer as de- 
scribed above) is added to the amount of money (bal- 
ance) stored in the second purse area 106B, and the 
total amount is stored in the work area W1 . The amount 
of money stored in this work area W1 indicates the bal- 
ance in the second purse assuming that the amount of 
money to be transferred has been transferred from the 
first purse to the second purse. 
[0079] Then, the processing for transfer can be exe- 
cuted in response to the successful authorization and 
verification in this transaction for transfer, so that each 
amount of money stored in the work areas W1 and W2 
is ciphered respectively (step S1011). Each amount of 
money ciphered as described above is sent to the serv- 
ice terminal as ciphered information (step S1012). 
[0080] Then, if there is no response received from the 
service terminal within the preset period of time (step 
S1013), the processing shifts to step S1014, and the 
work areas W1 and W2 are cleared in order to make the 
transaction for transfer invalidated. Then, the process- 
ing returns to the main processing (Refer to Fig. 8) . On 
the other hand, if reception of a response is confirmed 
in step S1 01 3, determination is made as to whether the 



information received with this received response is ac- 
knowledgement code or not (step S1015). This ac- 
knowledgement code indicates that the service terminal 
acknowledge the transfer demanded from a user. 
[0081] If it is determined in step S1015 that the re- 
ceived information is acknowledgement code, the trans- 
action for transfer is regarded as valid, and at first, the 
ciphered amount of money in the work area W2 is stored 
in the first purse area 106A (step S1017), and further 
the ciphered amount of money in the work area W1 is 
stored in the second purse area 106B (step S1018). As 
described above, each of the balances in the first purse 
area 106 A as well as in the second purse area 106B is 
updated according to the demanded amount of money 
for transfer. It should be noted that, if it is determined in 
step S101 5 that the received information is not acknowl- 
edgement code, the transaction for transfer is regarded 
as invalid, and then retransmissbn of a command is de- 
manded to the service terminal in step S1016, and the 
processing returns to step S102 (Refer to Fig. 8) in the 
main steps. 

[0082] Further, stored in the third purse area 1 06C is 
information on the date of the transaction for transfer as 
historical information (step S1019). Finally, transaction - 
completion signatu re code is sent to the service terminal 
to report that the processing inside the IC card 1 is com- 
pleted to the service terminal (step S1020). 
[0083] Next description is made for payment opera- 
tions (step S110 in Fig. 8). Fig. 12 and Fig. 13 are flow 
charts each explaining the processing for payment in the 
main operations shown in Fig. 8, and Fig. 14 is a flow 
chart for explaining additional transaction in the 
processing for payment shown in Fig. 12. The process- 
ing for payment assumes a case where the IC card 1 is 
inserted in the withdrawing machine 2, and a portion (a 
demanded amount for transfer) of the balance in the first 
purse is paid to the withdrawing machine 2 by using the 
withdrawing machine 2. Required for this payment 
processing is a code number as a PIN for security of the 
first purse. 

[0084] In the payment processing, at first, a code 
number and a demanded amount of money are request- 
ed to the service terminal (step S1101 ). Then, when the 
code number and demanded amount of money are re- 
ceived (step S1102), the demanded amount of money 
is first de-ciphered (step S1103). Then, the de-ciphered 
and demanded amount is subtracted from the balance 
stored in the first purse area 106A, and the amount of 
money remaining in the first purse is stored in the work 
area W2 in the RAM 105 (step S1104). The amount of 
money stored in this work area W2 indicates the balance 
in the first purse assuming that the demanded amount 
has been paid from the first purse to the withdrawing 
machine 2. 

[0085] Then, if the amount of money stored in the 
work area W2 is zero or plus in step S1 1 04 (step S1 1 05), 
this time, the code number received in step S1 1 02 is de- 
ciphered (step S1107). On the other hand, if the amount 
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of money stored in the work area W2 is minus (step 
S1105), the processing shifts to step S1106 and addi- 
tional transactions are executed (Refer to Fig. 14). 
[0086] When the code number is de-ciphered in step 
S1107, and in step S1108a code number stored in the 
first directory D1 is read out and de-ciphered. Then, ver- 
ification is made between the de-ciphered code number 
of the IC card 1 itself and the de-ciphered code number 
received from the service terminal (step S1109), and if 
both of the code numbers coincide with each other (step 
S1110), the authorization is regarded as successful and 
the processing shifts to step S11 1 1 . On the other hand, 
when the authorization is not successful, this transac- 
tion for payment is regarded as invalid and invalidated. 
[0087] In step S 1111, the payment can be executed 
in response to the successful authorization in this trans- 
action for payment, so that the amount of money stored 
in the work area W2 is ciphered. The amount of money 
ciphered as described above is sent to the service ter- 
minal as ciphered information (step S1112). 
[0088] Then, if there is no response received from the 
service terminal within the preset period of time (step 
S1113), the processing shifts to step S1115, and the 
work area W2 is cleared in order to make the transaction 
for transfer invalidated. Then, the processing returns to 
the main processing (Refer to Fig. 8). On the other hand, 
if reception of a response is ensured in step S1 1 1 3, de- 
termination is made as to whether the information re- 
ceived with this received response is reception code or 
not (step S1114). This reception code indicates that the 
service terminal completes the reception of payment de- 
manded from the user. 

[0089] If it is determined in step S1114 that the re- 
ceived information is reception code, the transaction for 
payment is regarded as valid, and the ciphered amount 
of money in the work area W2 is stored in the first purse 
area 106A (step S1116). As described above, the bal- 
ance in the first purse area 106A is updated according 
to the demanded amount of money for payment. 
[0090] Further, stored in the third purse area 106C is 
information on the date of the transaction for transfer or 
the like as historical information (step S1117). Finally, 
transaction-completion signature code is sent to the 
service terminal to report that the processing inside the 
IC card 1 is completed to the service terminal (step 
S1118). 

[0091] Then, an additional transaction (Refer to Fig. 
14) in step S1106 is processed as follows. Namely, at 
first the balance in the second purse area 106B is read 
out in step S1 501 , then in step S1 502, the read out bal- 
ance is added to the amount of money having been 
stored in the work area W2 in step 1104. Namely, the 
amount of money stored in the work area W2 is updated 
by means of addition. 

[0092] Then, if the amount of money stored in the 
work area W2 updated in step S1502 is zero or plus 
(step S1503), the processing shifts to step S1504, but 
if the amount of money stored in the work area W2 is 



minus (step S1503), because even the balance in the 
first purse obtained by adding the balance in the second 
purse thereto is less than the demanded amount of mon- 
ey for payment, the transaction for payment is regarded 

5 as invalid and invalidated. 

[0093] When the processing shifts to step S1 504, be- 
cause the amount obtained by adding the balance in the 
second purse to that in the first purse reaches the de- 
manded amount of money for payment, the processing 

10 as payable one is continued. For this reason, the 
processing returns to step S1107, and the same 
processing is executed. However, as the balance in the 
second purse area 106B is used because this additional 
transaction is included therein, the amount of money 

15 stored in the second purse area 1 06B is cleared to zero 
in step S1116 only in a case where this additional trans- 
action is included. 

[0094] Further description is made for the processing 
for deposition with a card (step S111 in Fig. 8). Fig. 15 

20 and Fig. 16 are flow charts each for explaining the 
processing for deposit with a card in the main operations 
shown in Fig. 8. This processing for deposit with a card 
is processing for withdrawing a deposited amount from 
the central system 3 by a demanded amount through 

25 the withdrawing machine 2 and storing the withdrawn 
amount in the IC card 1. A code number as a PIN is 
required for this card deposit processing for security of 
the first purse. 

[0095] Atfirstanamounttobedeposited isdemanded 
30 to a service terminal, and the processing for de-cipher- 
ing the demanded amount to be deposited sent from the 
service terminal is executed (step S1201). This de- 
manded amount is information which the depositor en- 
ters with the service terminal. Then, information on the 
35 center account is read out from the information area of 
the EEPROM 106, and the account number included in 
the center account information is extracted (step 
S1202). 

[0096] Then a code number is demanded to the serv- 

40 jce terminal (step S1203), and when an ciphered code 
number is received from the service terminal the ci- 
phered code number is de-ciphered (step S1204). Then 
a code number of the first purse is read out from the first 
directory D1 (step S1205), and the code number is de- 

45 ciphered (step S1206). 

[0097] Further, an ciphering key for transmission of in- 
formation to the center is read out from an area ID sent 
from the service terminal (step S1207), and the de- 
manded amount for deposit having being de-ciphered 

50 in step S1201 and the account number having been 
read out in step S1202 are ciphered with the ciphering 
key for transmission thereof to the center (step S1 208). 
The information ciphered as described above is sent to 
the center by being added to a command for demanding 

55 a card deposit as ciphered information (step SI 209). 
[0098] Then, a standby state is effected for waiting for 
reception until the demanded amount is sent from the 
central system 3 (step S1210). When the demanded 
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amount is sent from the central system 3 (step S1 21 1 ), 
the balance stored in the first purse area 106A is read 
out (step S1212). The received and demanded amount 
is added to the balance in the first purse : the total 
amount is stored in the work area W2 (step S1 21 3), and 5 
the amount stored in the work area W2 is stored in the 
first purse area 106A. with those operations, the card 
deposit into the first purse area 106A is completed. 
[0099] Then, the demanded amount and the balance 
in the first purse area 106A are ciphered respectively 
(step S1 21 5), and the ciphered information is outputted 
to the service terminal (step S1216). 
[0100] Next description is made for de-ciphering, ci- 
phering, and preprocessing executed in the electronic 
purse system. At first description is made for the 
processing for de-ciphering. Fig. 17 is a flow chart for 
explaining the processing for de-ciphering in Embodi- 
ment. 

[0101] The processing for de-ciphering shown in Fig. 
17 is a function added to all of the withdrawing machine 
2, device in the user's side 4, and IC card 1 each appli- 
cable to the electronic purse system. The function may 
be realized by DSP (Digital Signal Processor) which is 
not shown in the figure. When this DSP is applied there- 
in, a de-ciphering circuit section for de-ciphering is pro- 
vided inside the DSP. 

[0102] As operations, at first, a de-ciphering key is 
read out from an area ID {step S1301), and the de-ci- 
phering key is sent to the de-ciphering circuit section of 
the DSP (step S1302)..A information to be de-ciphered 
is extracted from the received information sent from the 
service terminal (step S1 303), and the extracted section 
to be de-ciphered is transferred to the de-ciphering cir- 
cuit section (step S1304). As the de-ciphering circuit 
section obtains the de-ciphering key as well as the sec- 
tion to be de-ciphered as described above : the process- 
ing for de-ciphering thereof is executed in the de-cipher- 
ing circuit section at that stage. Then, when the de-ci- 
phered information is received from the de-ciphering cir- 
cuit section, the processing for de-ciphering is complet- 
ed (steps 1305). 

[0103] Next description is made for processing for ci- 
phering. Fig. 18 is a flow chart for explaining the 
processing for ciphering in Embodiment. The process- 
ing for ciphering shown in Fig. 18 is a function added to 
all of the withdrawing machine 2, device in the user's 
side 4, and IC card 1 each applicable to the electronic 
purse system. The function may be realized by DSP 
(Digital Signal Processor) which is not shown in the fig- 
ure. When this DSP is applied therein, an ciphering cir- 
cuit section for ciphering is provided inside the DSP. 
[01 04] As operations, at first, an ciphering key is read 
out from an area ID (step S1 401 ), and the ciphering key 
is sent to the ciphering circuit section of the DSP (step 

51402) . A section to be ciphered is extracted from the 
received information sent from the service terminal (step 

51403) , and the extracted information is transferred to 
the ciphering circuit section (step S1 404). As the cipher- 



ing circuit section obtains the ciphering key as well as 
the information to be ciphered as described above, the 
processing for ciphering thereof is executed in the ci- 
phering circuit section at that stage. Then, when the ci- 
phered information is received from the ciphering circuit 
section, the processing for ciphering is completed (step 
S1405). 

[0105] Further, next description is made for preproc- 
essing. Fig. 19 and Fig. 20 are flow charts each for ex- 
plaining the preprocessing in Embodiment. Fig. 19 and 
Fig. 20 described below show the processing for com- 
munications between the terminal and the IC card 1. 
[0106] The terminal, at first, waits for insertion of an 
IC card 1 thereto (step T1 ), and the insertion thereof is 
checked for a preset period of time (step T2). When the 
IC card 1 is inserted into the inserting section of the ter- 
minal, the terminal checks how the IC card is set therein 
from the insertion (step T2). Then, the terminal supplies 
power to the IC card 1 (step T3), and further sends a 
reset signal to the IC card 1 (step T4). 
[01 07] The IC card 1 turns ON the power for the card 
after the power supply is received from the terminal 
(step C1 ), and resets the CPU 1 03 according to the reset 
signal sent therefrom (step C2). Then, the IC card 1 first 
reads out types of commercial card (such as a VISA card 
and a MASTER card) usable with the own IC card 1 
through initialization thereof (step C3). The read out 
types of the card are added to an ATR (Answer To Re- 
set) signal and sent back to the service terminal (step 
C4). 

[01 08] The terminal receives the types of the card af- 
ter the reset signal is sent thereto (step T4), and identi- 
fies the card usable by the terminal from the types of the 
card (step T5). It should be noted that, if there is no card 
available, the transaction is forcefully terminated. Also, 
if there is any card available, the terminal generates ran- 
dom numbers and sends the random numbers to the IC 
card 1 (step T6), and at the same time ciphers the ran- 
dom numbers with the ciphering key for its own (step 
T7). 

[0109] The IC card 1 reads out, when having received 
the random numbers sent from the service terminal 
(step C5), the ciphering key for its own (step C6), and 
ciphers the received random numbers with the ciphering 
key (step C7) . The IC card 1 further sends the ciphered 
random numbers to the service terminal (step C8), and 
waits for a response from the service terminal. 
[0110] The terminal compares, when having received 
the ciphered random numbers from the IC card 1 (step 
T8), the random numbers ciphered by the terminal to 
those ciphered by the IC card 1 (step T9). Then, if it is 
determined that the two ciphered random numbers co- 
incide with each other (step T1 0), determination is made 
according to authorization by the terminal that the IC 
card 1 is applicable. Accordingly, the terminal sends a 
response that it is applicable to the IC card 1 (step T11). 
On the other hand, if it is determined that the two random 
numbers do not coincide with each other (step T10), it 



75 



20 



25 



30 



35 



40 



45 



50 



12 



BNSDOCID: <EP 0907154A2J_> 



23 



EP 0 907 154 A2 



24 



is determined according to authorization by the terminal 
that the !C card 1 is not applicable, and for this reason 
this transaction is regarded as invalid and the process- 
ing is terminated. 

[01 1 1 ] When the response on card's being applicable 5 
is sent to the IC card 1 from the terminal, this time the 
IC card 1 generates, when having received the re- 
sponse (step C9), random numbers. The IC card 1 
sends the random numbers to the service terminal (step 
C10). The IC card 1 ciphers, together with generation of 
the random numbers, the random numbers with the ci- 
phering key for its own (step C11). 
[0112] The terminal reads out, when having received 
the random numbers sent from the IC card 1 (step T1 2), 
the ciphering key of the terminal (step T1 3), and ciphers 
the sent random numbers with the ciphering key to be 
sent to the IC card 1 (step T1 4). Then, the terminal waits 
for a response from the IC card 1 . 
[01 1 3] The I C card 1 compares, when having received 
the ciphered random numbers from the service terminal 
(step C12), the random numbers ciphered by the card 
to those ciphered by the service terminal (step C13). 
Then, if it is determined that the two ciphered random 
numbers coincide with each other (step C14), determi- 
nation is made according to authorization by the I C card 
1 that the terminal is applicable. Accordingly, the IC card 
1 sends a response that it is applicable to the service 
terminal (step C1 5). On the other hand, if it is determined 
that the two random numbers do not coincide with each 
other (step C14), it is determined according to authori- 
zation by the IC card 1 that the service terminal is not 
applicable, and for this reason this transaction is regard- 
ed as invalid and the processing is terminated. 
[01 1 4] It should be noted that the terminal starts, when 
having received the response on terminal's being appli- 
cable (step T1 5) from the IC card 1 , the transaction, but 
when having received the response on terminal's not be- 
ing applicable, the terminal stops the transaction with 
the IC card 1. 

[0115] As described above, any transaction is not 
started in the preprocessing unless the terminal recog- 
nizes the applicability of the IC card 1 and vice versa, 
so that an electronic purse system can be realized with 
high security insured. 

[0116] Next description is made for the device in the 
user's side 4 with a particular example thereof. Fig. 21 
is a block diagram showing an example of configuration 
of an ordinary transaction machine which is an example 
of the device in the user's side in Embodiment. The or- 
dinary transaction machine shown in Fig. 21 is located 
in a place for playing pachinko (pinball game center) and 
provides controls for discharging balls for pachinko or 
executes the processing for exchanging the balls to 
cash or the like by using the IC card. 
[0117] The ordinary transaction machine shown in 
Fig. 21 comprises an IC card reader/writer 401 , a display 
402, a ten-key 403, equipment 404 such as a bar code 
reader, a receipt printer 405, a CPU 406, a memory 407, 



and a card processor 408 for a shop. It should be noted 
that it is assumed that the processing itself such as dis- 
charging of pachinko balls or exchanging from balls to 
cash is executed by some other device (not shown in 
the figure) connected to the ordinary transaction ma- 
chine. 

[0118] The IC card reader/writer 401 reads informa- 
tion stored in the IC card 1 or writes information therein, 
when an IC card is inserted therein. The display 402 vis- 
ually displays thereon information in a transaction. The 
ten-key 403 comprises numerical keys for entry numer- 
als such as an amount of money to be paid. The equip- 
ment 404 such as a bar code reader reads bar code in- 
formation from a sheet with the bar code recorded ther- 
eon. The receipt printer 405 records a result of services 
such as change to balls or change to cash or the like. 
The CPU 406 provides controls for processing of the or- 
dinary transaction machine on the whole. The memory 
407 comprises a ROM for storing therein a program with 
which the CPU operates and a RAM used as a work 
area of the CPU 406. The card processor 408 for a shop 
is equipment for processing a card specific to the shop. 
[0119] Description is further made for another exam- 
ple of the device in the user's side 4. Fig. 22 is a block 
diagram showing an example of configuration of an or- 
dinary transaction telephone unit which is an example 
of the device in the user's side in Embodiment. 
[0120] The ordinary transaction telephone unit shown 
in Fig. 22 comprises an IC card reader/writer 501 , a dis- 
play 502, equipment 503 for controlling services for the 
telephone unit or the like/message units, a receipt print- 
er 504, a CPU 505, a memory 506, and a card processor 
507 for a shop. 

[0121] The IC card reader/writer 501 reads informa- 
tion stored in the IC card 1 or writes information therein, 
when an IC card is inserted therein. The display 502 vis- 
ually displays thereon information in a transaction. The 
equipment 503 for controlling services for the telephone 
unit or the like/message units is connected to a tele- 
phone line not shown in the figure and provides controls 
for message units for accounting according to a period 
of time and a call distance or the like when a telephone 
function is used. The receipt printer 504 records a result 
of telephone services or the like. The CPU 505 provides 
controls for processing of the ordinary transaction tele- 
phone unit on the whole. The memory 506 comprises a 
ROM for storing therein a program with which the CPU 
505 operates and a RAM used as a work area of the 
CPU 505. The card processor 507 for a shop is equip- 
ment for processing a card specific to the shop. 
[0122] Next description is made for operations of the 
device in the user's side 4. At first, description is made 
for operations of the ordinary transaction machine. Fig. 
23, Fig. 24 and Fig. 25 are flow charts each for explain- 
ing operations for a transaction between the ordinary 
transaction machine shown in Fig. 21 and the IC card 
1 . This ordinary transaction machine has no area ID and 
executes processing according to the machine ID. 
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[0123] The ordinary transaction machine shown in 
Fig. 21, at first, executes preprocessing (step T101). 
This preprocessing is executed by the same operations 
as those of the terminal described above (Refer to Fig. 
1 9 and Fig. 20) . In the IC card 1 , on the other hand, the 5 
preprocessing is executed (step C101 ), and contents of 
the processing are executed according to the charts 
shown in Fig. 19 and Fig. 20. 

[01 24] When the ordinary transaction machine finish- 
es the preprocessing, the machine ID of the machine is 
read out (step T102). At this point of time, a display 
screen requesting entry of a demanded amount tor pay- 
ment is formed on the display 402 of the ordinary trans- 
action machine. In this step : entry of the demanded 
amount for payment becomes possible, and if the de- 
manded amount for payment is entered thereafter, the 
amount to be paid is temporarily stored in the memory 
407. Then, after a machine ID is sent together with a 
payment command to the IC card 1 (step T103), the or- 
dinary transaction machine waits for receiving an 
amount of money in the second purse sentfrom the IC 
card 1 (step T1 04). 

[0125] The IC card 1 determines, when having re- 
ceived the ID and a command for payment (step C102), 
whether an area ID is included in the command for pay- 
ment or not (step C103). If it is determined that the area 
ID is included in the payment command (step C103), an 
address of the second purse is read out from the second 
directory D2 (step C104), and on the other hand, if it is 
determined that the area ID is not included therein (step 
C103), this transaction is terminated. 
[0126] When the processing shifts to step C105, de- 
termination is made as to whether the received machine 
ID coincides with the machine I D of the second directory 
D2 or not. If it is determined that both of the machine 
IDs coincide with each other, in step C106, the balance 
is read from-the second purse area 106B according to 
the second purse address, and at the same time the bal- 
ance is outputted to the ordinary transaction machine. 
[0127] The ordinary transaction machine displays, 
when having received the balance of the second purse 
from the IC card 1 (step T105), the received amount on 
the display 402 (step T106). Then, if a demanded 
amount for payment has been entered at this stage by 
operations of the ten-key 403 (step Tl 07), the process- 
ing shifts to step Till. In step Till , the demanded 
amount for payment stored in the memory 407 is read 
out and sent to the IC card 1 . Then the processing shifts 
to step T112. 

[01 28] On the other hand, if the demanded amount for 
payment is not entered (step T107), the processing 
waits for entry thereof for a preset period of time (step 
T108), and the demanded amount for payment is sent, 
at the stage when it is entered with the ten-key 403 (step 
T109), to the IC card 1 as it is (step T110). Then the 
processing shifts to step T112. 

[0129] The IC card 1 has already received the pay- 
ment command from the ordinary transaction machine 



(step C 1 07), and further receives the demanded amount 
for payment (step C1 08). In this case, the IC card 1 sub- 
tracts the received and demanded amount for payment 
from the balance in the second purse, and stores the 
amount of money obtained as a result in the work area 
W1 (step CI 09). 

[0130] Then, if the amount of money stored in the 
work area W1 is zero or plus (step C110), payment is 
possible, so that information indicating that the payment 
is possible and the amount for payment are reported to 
the ordinary transaction machine (step C111). Then, a 
standby state is effected for waiting for reception code. 
On the other hand, if the amount of money stored in the 
work area W1 is minus (step C110), this transaction is 
regarded as invalid and the processing is terminated. 
[0131] The ordinary transaction machine displays, 
when having received the amount for payment trom the 
IC card 1 as a payable amount (step Tl 1 2), the received 
amount for payment on the display 402 so that the user 
can check (step T11 3). Then, a standby state is effected 
for waiting for validation by means of an operation with 
an Enter key provided in the ten-key 403 (step T114). 
When the user operates the Enter key, the operation for 
the validation is accepted (step T114), acknowledge- 
ment is sent to the IC card 1 (step T115), and further 
reception code indicating completion of receiving the 
amount to be paid is sent thereto (step T116). 
[01 32] The IC card 1 further receives, when reception 
of the acknowledgement is accepted within a preset pe- 
riod of time (step C 11 2), the reception code (step C1 1 4). 
It should be noted that, if the acknowledgement cannot 
be accepted within the preset period of time, this trans- 
action is regarded as invalid, so that the work area W1 
is cleared (step C1 1 3), and the processing is terminated. 
[0133] After the reception code is received in step 
C 1 1 4, the processing shifts to step C 1 1 5, and an amount 
stored in the work area W1 is stored in the second purse 
area 1 06 B. With those operations, the amount to be paid 
required for exchanging with some service is taken out 
from the second purse. Then, the history on this trans- 
action (date or the like) is stored in the third purse area 
106C (step C116), and finally, the transaction-comple- 
tion signature code is sent to the ordinary transaction 
machine (step C117). 

[0134] The ordinary transaction machine prepares, 
when having received the transaction-completion signa- 
ture code from the IC card 1, historical information on 
its own transaction and updates the balance (step 
T117), and then executes the processing for services 
(controls over discharging pachinko balls or exchange 
from balls to cash or the like) (step J118). Finally, IC 
card 1 is returned from the IC card reader/writer 401 
(step T1 19). 

[01 35] Next description is made for the operations of 
an ordinary transaction telephone unit. Fig. 26, Fig. 27 
and Fig. 28 are flow charts each for explaining the op- 
erations for transaction between the ordinary transac- 
tion telephone unit shown in Fig. 22 and an IC card 1. 
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[01 36] The ordinary transaction telephone unit shown 
in Fig. 22 executes, at first, preprocessing (step T201). 
This preprocessing is executed by the same operations 
as those of the terminal (Refer to Fig. 1 9 and Fig. 20). 
In the IC card 1 , on the other hand, the preprocessing 
is executed (step C201 ), and contents of the processing 
are executed according to the flow charts shown in Fig. 
19 and Fig. 20. 

[0137] When the ordinary transaction telephone unit 
finishes the preprocessing, a machine ID of its own is 
read out (step T202). At this point of time, a display 
screen requesting entry of a demanded amount lor pay- 
ment is formed on the display 402 of the ordinary trans- 
action telephone unit. In this step, entry of the demand- 
ed amount for payment becomes possible, and if the de- 
manded amount for payment is entered thereafter, the 
amount to be paid is temporarily stored in the memory 
506. Then, after a machine ID is sent together with a 
payment command to the IC card 1 (step T203), the or- 
dinary transaction telephone unit waits for receiving an 
amount of money in the second purse sent from the IC 
card 1 (step T204). 

[0138] The IC card 1 determines, when having re- 
ceived the ID and a command for payment (step C202), 
whether an area ID is included in the command for pay- 
ment or not (step C203). If it is determined that the area 
ID is included in the payment command (step C203), an 
address of the second purse is read out from the second 
directory D2 (step C204), and on the other hand, if it is 
determined that the area I D is not included therein (step 
C203), this transaction is terminated. 
[0139] When the processing shifts to step C205, de- 
termination is made as to whether the received machine 
I D coincides with the machine I D of the second directory 
D2 or not. If it is determined that both of the machine 
IDs coincide with each other, in step C206, the balance 
is read from the second purse area 106B according to 
the second purse address, and at the same time the bal- 
ance is outputted to the ordinary transaction telephone 
unit. 

[0140] The ordinary transaction telephone unit dis- 
plays, when having received the balance of the second 
purse from the IC card 1 (step T205), the received 
amount on the display 502 (step T206). Then, the ordi- 
nary transaction telephone unit starts services concern- 
ing telephone functions. 

[0141] The ordinary transaction telephone unit de- 
tects, after the services are started, an amount of unit 
services according to calls and updates a charging 
counter according to controls for message units (step 
T207). Then, a value on the charging counter updated 
every moment is subtracted from the balance in the sec- 
ond purse, namely the amount appearing on the display 
502 (received amount of money), and until the usable 
amount of money obtained from the result reaches zero 
(step T208), or until the end of service is detected (step 
T21 0), the processing for updating the charging counter 
in step T207, computing of the usable amount of money 



in step T208, and displaying the usable amount of mon- 
ey in step T209 (displayed on a display work area of the 
display 502) are executed. 

[0142] Then, when the usable amount- of money 
s reaches zero (step T208), or when the end of service is 
detected (step T21 0), the processing shifts to step T21 1 , 
and waits for reception of a request for an amount to be 
paid (step T211). When the request for the amount to 
be paid is received as described above (step T211), a 
io value on the charging counter is read and the value is 
senttothelCcard 1 as a demanded amount for payment 
(step T212). 

[0143] The IC card 1 has already received the pay- 
ment command from the ordinary transaction telephone 

is unit (step C207), and further receives the demanded 
amount for payment (step C208). In this case, the IC 
card 1 subtracts the received amount for payment from 
the balance in the second purse, and stores the amount 
of money obtained as a result in the work area W1 (step 

20 C209). 

[0144] Then, if the amount of money stored in the 
work area W1 is zero or plus (step C210), payment is 
possible, so that information indicating that the payment 
is possible and the amount for payment are reported to 

25 the ordinary transaction telephone unit (step C211). 
Then, a standby state is effected for waiting for reception 
code. On the other hand, if the amount of money in the 
work area Wt is minus (step C210), this transaction is 
regarded as invalid and the processing is terminated. 

30 [0145] The ordinary transaction telephone unit dis- 
plays, when having received the amount for payment 
from the IC card 1 as a payable amount (step T21 3), the 
received amount for payment on the display 402 so that 
the user can check (step T214) . Then, a standby state 

35 is effected for waiting for validation by means of an op- 
eration with an Enter key provided in the equipment 503 
for controlling services for telephone unit/message un its 
(step T215). When the user operates the Enter key, the 
operation for the validation is accepted (step T21 5), ac- 

40 knowledgement is senttothelCcard 1 (stepT216), and 
further reception code indicating completion of receiving 
the amount to be paid is sent thereto (step T217). 
[0146] The IC card 1 further receives, when reception 
of the acknowledgement is accepted within a preset pe- 

45 riod of time (step C21 2), the reception code (step C21 4). 
It should be noted that, if the acknowledgement can not 
be accepted within the preset period of time, this trans- 
action is regarded as invalid, so that the work area W1 
is cleared (step C213), and the processing is terminat- 

50 ed. 

[0147] After the reception code is received in step 
C214, the processing shifts to step C215, and an 
amount stored in the work area W1 is stored in the sec- 
ond purse area 106B. With these operations, the 
55 amount to be paid required for exchanging with some 
service is taken out from the second purse. Then, the 
history on this transaction (date or the like) is stored in 
the third purse area 106C (step C216), and finally, the 
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transaction-completion signature code is sent to the or- 
dinary transaction telephone unit (step C217). 
[0148] The ordinary transaction telephone unit pre- 
pares, when having received the transaction-comple- 
tion signature code from the IC card 1, historical infor- 
mation on its own transaction, updates the balance and 
prints a receipt (step T218), and finally, returns the IC 
card 1 from the IC card reader/writer 501 (step T219). 
[0149] Next description is made for operations of the 
withdrawing machine 2. Fig. 29 to Fig. 32 are flow charts 
each for explaining operations for a transaction between 
the withdrawing machine and the IC card 1 in Embodi- 
ment, and Fig. 33 is a view showing one example of a 
display screen during the operations for a transaction 
by the withdrawing machine in Embodiment. 
[0150] The flow charts shown in Fig. 29 to Fig. 32 
show an example of which the withdrawing machine 2 
is used as a deposit withdrawing machine. The with- 
drawing machine 2, at first, in. order to execute a with- 
drawal transaction with the IC card 1, provides display 
on an amount of money for the transaction as well as a 
code number, and provides an instruction to insert a 
card thereinto on the display screen (step T301). After 
the information is displayed, the withdrawing machine 2 
starts the preprocessing (step T302). The IC card 1 also 
executes the preprocessing in accordance with the op- 
eration in the withdrawing machine 2 (step C301 ). 
[0151] Then, the withdrawing machine 2 sends, after 
the amount of money and code number are inputted 
(step T303), the payment command with the machine 
ID as well as the area ID (the first purse is specified) 
included therein to the IC card (step T304). 
[0152] The I C card 1 reads, when having received the 
payment command from the withdrawing machine 2 
(step C302), because the area ID is included in the re- 
ceived payment command (step C303) : an area indicat- 
ed by the area ID (step C304). 

[0153] The IC card 1 reads a machine ID in the pay- 
ment command and compares the machine ID to the 
machine ID of the first directory D1. In this case, if it is 
determined that both of the machine IDs coincide with 
each other (step C305), further a correlation between 
the access right of the machine ID and the received ac- 
cess is verified (step C306) . It should be noted that, if 
it is verified that both of the machine IDs do not coincide 
with each other (step C305), this transaction is regarded 
as invalid and invalidated. 

[0154] When the correlation is verified in step C306, 
the processing further shifts to step C307. If it is deter- 
mined in step C307 that the area read in step C304 is 
the first purse, the processing shifts to step C308, and 
if not, the processing executes other mode. 
[0155] When the processing shifts to step C308, the 
contents of a demand from the withdrawing machine 2 
is determined. In this case, because the withdrawing 
machine 2 has sent the payment command to the IC 
card, it is determined that the request is a payment. Ac- 
cordingly, description is made only for the payment with 



reference to the figures (Refer to Fig. 29, Fig. 30 and 
Fig. 31 ), and other operations such as transfer or a card 
deposit follow the operations of the IC card 1 as de- 
scribed above. 

5 [0156] In a case of the demand for payment, the 
processing for payment in Fig. 12 and Fig. 13 having 
already been described is started. In the payment 
processing, at first, a code number and an amount to be 
demanded are requested to the withdrawing machine 2 

io (step C309). 

[01 57] The withdrawing machine 2 determines, when 
having received the request for a code number and an 
amount for payment from the IC card 1 , whether both of 
the information have already been entered or not (step 

is T305). In this case, both of the information have already 
been entered in step T303, so that the processing shifts 
to the next step T306. In step T306, both of the informa- 
tion, namely the code number and the amount to be paid 
are ciphered, and in stepT307, the ciphered information 

20 is sent to the IC card 1 . 

[0158] The IC card 1 at first de-ciphers, when having 
received the code number and the demanded amount 
for payment (step C310), the code number (step C311). 
When the code number is de-ciphered as described 

25 above, and then in step C31 2, the code number stored 
in the first directory D1 is read out, and the code number 
is de-ciphered. 

[0159] Further, verification is made between the de- 
ciphered code number of the IC card 1 and the de-ci- 

30 phered code number received from the withdrawing ma- 
chine 2 (step C313), and if it is determined that both of 
the code numbers coincide with each other (step C31 4), 
the authorization is regarded as successful, and the 
processing shifts to step C315. On the other hand, if it 

35 is determined that the authorization is not passed, this 
transaction for payment is regarded as invalid and in- 
validated. 

[0160] Further, in the IC card 1 , each balance of the 
first purse area 1 06A as well as of the second purse area 

40 106B is ciphered and sent to the withdrawing machine 
2 (step C315). With those operations, the withdrawing 
machine 2 presents, when having received each bal- 
ance of the first purse as well as the second purse from 
the IC card 1 (step T308), the balances remaining in the 

45 first purse as well as in the second purse to the user by 
displaying the balances on the display (step T309). 
Then, the withdrawing machine 2 waits for a report on 
IC card's being payable from the IC card 1 (step T310). 
[0161] In the IC card 1 , the received and demanded 

so amount for payment is de-ciphered (step C316). Then, 
the demanded amount for payment is subtracted from 
the balance stored in the first purse area 106A, and the 
amount of money after the subtraction is stored in the 
work area W2 (step C317). 

ss [0162] Then, if the amount of money stored in the 
work area W2 is zero or plus (step S318), payment is 
possible, so that information indicating that the payment 
is possible, the balance in the first purse, and the 
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amount of money stored in the work area W2 are ci- 
phered respectively (step C322). Each information ci- 
phered as described above is sent to the withdrawing 
machine 2 as ciphered information (step C323) . On the 
other hand, if the amount of money in the work area W2 
is minus (step C31 8), the processing shifts to step C31 9 
and the additional transactions shown in Fig. 1 4 are ex- 
ecuted. 

[0163] Namely, the IC card 1 further reads the balance 
from the second purse area 1 068 (step C31 9), and adds 
the amount of money to the amount stored in the work 
area W2, and sets the total amount to be an amount 
stored in the work area W2 (step C320). After this oper- 
ation, if the amount stored in the work area W2 is zero 
or changed to plus, the ICcard 1 is payable instepC322 
and step C323, so that the IC card executes the 
processing for ciphering the balance in the first purse as 
well as the amount stored in the work area W2 and send- 
ing the ciphered information to the machine. 
[0164] The withdrawing machine 2 displays, when 
having received the ciphered information from the IC 
card 1 and ensuring that the card is payable (step T31 0), 
as shown in Fig. 33, the balances before payment and 
after the payment for checking based on the amount of 
money in the work area W2 (step T311). 
[0165] In display of the balances for checking, 
amounts of money (indicated by Yen as one example) 
before payment and after the payment in the first purse 
as well as in the second purse respectively appear on 
the display, and an amount to be paid, an icon "Enter" 
for an operation of validation, and an icon "Cancel" for 
an operation of cancellation further appear thereon. 
These operations are executed with a key-control panel 
not shown in the figure. In the example shown in Fig. 
33, the amounts of money before and after the payment 
in the first purse are a-Yen and A- Yen respectively, and 
the amounts of money before and after the payment in 
the second purse are b-Yen and B-Yen respectively. 
Further, the amount to be paid is C-Yen. 
[0166] Then, the withdrawing machine 2 waits for an 
operation of validation by the user (step T312), accepts 
the operation for the validation and at the same time 
sends acknowledgement to the IC cards (step T313), 
and also sends the reception code thereto (step T31 4). 
The reception code proves that a payment is surely re- 
ceived from the IC card 1 . * 

[0167] In the IC card t , if the response is not received 
from the withdrawing machine 2 within the preset period 
of time after the ciphered information is sent in step 
C323 (step C324), the processing shifts to step C325, 
and the work area W2 is cleared in order to make this 
transaction for payment invalid. On the other hand, if re- 
ception of the response is ensured in step C324, deter- 
mination is made as to whether the information received 
with the response is reception code or not (step C326). 
[0168] If the received information is reception code, 
the transaction for payment is regarded as valid, so that 
the ciphered amount of money in the work area W2 is 



stored in the first purse area 106A (step C327). As de- 
-scribed above, the balance in the first purse area 106 A 
• is updated according to the demanded amount for pay- 
ment. 

5 [01 69] Further, information such as a date of transac- 
tion for transfer is stored in the third purse area 106C as 
historical information (step C32B). Finally, the transac- 
tion-completion signature code is sent to the withdraw- 
ing machine 2 to report that the processing inside the 

10 IC card 1 is completed (step C329). 

[0170] The withdrawing machine 2 prepares, when 
having received the transaction-completion signature 
code from the I C card 1 , historical information on its own 
transaction, records the history in the IC card, updates 

is the balance, and prints a receipt, and then the process- 
ing is ended (step T315). 

[0171] Next description is made for the withdrawing 
machine 2 with an application thereof. Fig. 34 is a block 
diagram showing an example of configuration of an ATM 

20 (Automatic Teller Machine) as one example of the with- 
drawing machine in Embodiment. 
[0172] The ATM shown in Fig. 34 comprises a CRT/ 
touch panel 601 , a display control section 602, an entry 
detecting section 603, an IC card reader/writer 604, an 

2S interface 605, a cash counter/deposit mechanism 606, 
a mechanism control section 607, a line control section 
608, an ciphering/de-ciphering board 609, a CPU 610, 
a memory 61 1 , an external memory 61 2, a bank IC card 
reader 61 3. 

30 [0173] The CRT/touch panel 601 is used for entering 
information and various operations by touching the dis- 
play screen. The display control section 602 provides 
controls for a CRT display of the CRT/touch panel 601 , 
and the entry detecting section 603 detects a touch-en- 

35 try through the CRT/touch panel 601 . The I C card read- 
er/writer 604 has an IC card 1 inserted therein, and 
reads information from and writes information in the IC 
card 1. The interface 605 manages interface between 
an IC card 1 and the inside of the ATM. 

40 [0174] The cash counter/deposit mechanism 606 
comprises a cash counter for counting an amount of 
money for payment and a control mechanism for count- 
ing an amount of money and paying the amount in an 
account. The mechanism control section 607 provides 

45 controls over the cash counter/deposit mechan ism 606. 
The line control section 608 provides controls for com- 
munications with the host computer 31 of the central 
system 3 through the line. The ciphering/de-ciphering 
board 609 ciphers and de-ciphers information for a 

50 transaction. 

[0175] The CPU 610 provides controls over the ma- 
chine on the whole. The memory 611 comprises a ROM 
for storing therein a program with which the CPU 610 
operates and a RAM used as a work area of the CPU 

55 61 0. The external memory 61 2 is a high-capacity mem- 
ory such as a hard disk. The back IC card reader 613 
has an ordinary bank card inserted therein for operating 
a sequence for on-line banking and reads information 
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on authorization from the card. 
[0176] Next description is made for operations oi the 
ATM. Fig. 35 to Fig. 37 are flow charts each for explain- 
ing operations for a transaction between the ATM shown 
in Fig. 34 and an IC card, and Figs. 38A to 38E and Figs.. 5 
39A to 39D are views each showing one example of a 
display screen during the operations tor a transaction 
by the ATM in Embodiment. 

[0177] At first, the ATM provides, to transact for with- 
drawal with an IC card 1 , as shown in Fig. 38A, an initial 10 
screen with an instruction of inserting a card therein, an 
entry of a code number and an entry of a mode provided 
on the CRT/touch panel 601 (step T401 ). After this initial 
screen is provided thereon, the ATM starts preprocess- 
ing (step T402). In accordance with it the IC card 1 also 15 
executes preprocessing (step C401). 
[0178] Then, the ATM displays a second screen by 
deleting the instruction of card insertion or the like (step 
T403). Then, when one of modes (Payment, Deposit 
(card deposit), Transfer, Balance for reference) is spec- 20 
ified through a touch operation onto the CRT/touch pan- 
el 601 (step T404), determination is made which mode 
the specified mode is (step T405) . Herein the mode as- 
sumes a payment mode. Accordingly, if any mode other 
than the payment mode is specified, the figure and de- 25 
scription thereof are omitted as processing for some oth- 
er mode. 

[0179] It should be noted that, if a deposit mode is 
specified as one of other modes, as a screen for a de- 
posit mode shown in Fig. 38C, there appear a mode for 30 
transfer of cash , "Cash to IC card", and a mode for 
transfer of cash, "Cash to Account" : as further detailed 
modes. If the transfer mode is specified, as a screen for 
a transfer mode shown in Fig. 38D, there appear a mode 
for transfer of an amount "IC card to Account to be trans- 35 
f erred" and a mode for transfer of an amount "Account 
to Account to be transferred" as further detailed modes. 
Also, if the balance for reference mode is specified, as 
shown in Fig. 38E, there appear three modes such as 
a mode for "Deposit Balance", a mode for "IC card Bal- 40 
ance", and a mode for "Both Balances" as further de- 
tailed modes. 

[0180] If the payment mode is specified (step T405), 
as shown in Fig. 38B, a screen lor a payment mode is 
formed on the CRT/touch panel 601 (step T406) . Then, 45 
a further detailed mode is specified on this payment 
mode screen. 

[0181] Namely, there appear on the payment mode 
screen six types of mode such as "Account to IC card", 
"Account to Cash", "IC card to IC card", "IC card to 50 
Cash", "Account to IC card and Cash", and "IC card to 
IC card and Cash" (described as "Card" in place of "IC 
card" in Figs. 38B to Fig. 38E). A user specifies a desired 
mode out of the six types of mode through a touch op- 
eration. Herein, a case where a mode "Account to IC ss 
card" is specified is taken up as an example for descrip- 
tion, and figures and description of other modes are 
omitted herein as other modes. 



[01 82] When the 'Account/Card" mode is specified, a 
"screen for entering an amount of money as shown in~ - 
Fig. 39A appears on the CRT/touch panel 601, and an 
operation to the screen for entering an amount of money 
and editing of the screen are executed (step T409). 
There appear on the screen for entering an amount of 
money shown in Fig. 39A an instruction to enter an 
amount of money to be withdrawn from Al (one side as 
an example) to A2 (the other side as an example), nu- 
meric keys for entering an amount of money, keys for 
entering a unit of an amount of money (e.g. "Man-Yen" 
indicating ten thousand yen, and "Sen-Yen" indicating 
one thousand yen), an Enter key pressed after the 
amount of money is entered, and a Cancel key for can- 
celing this mode. Any of displays can be realized with 
touch -entry. 

[0183] Because the specified mode is the "Account/ 
Card" mode herein, "Account" is set in Al, and "Card" 
(which means an IC card) is set in A2 (step T410). Then, 
the processing waits for specification of an amount of 
money by the user on the screen for entering an amount 
(step T41 1 ). Then, when an amount of money is entered 
(step T411), the processing further waits for entry of a 
code number by the user (step T412). 
[0184] The ATM sends, after an amount of money is 
specified and a code number is entered (step T411 and 
step T412), an update command including the code 
number, a demanded amount for payment (a specified 
amount of money), a machine ID, and an area ID (the 
first purse is specified herein) to the I C card (step T41 3). 
It should be noted that the reason why the update com- 
mand is used herein is because balances in Al and A2 
are updated in accordance with transfer of an amount 
of money from Al to A2. It should be noted that this up- 
date command identifies the mode specified in step 
T405. 

[0185] The IC card 1 reads, when having received a 
payment command from the ATM (step C402) and as 
an area ID is included in the received update command 
(step C403), an area indicated by the area ID (step 
C404). 

[0186] The I C card 1 reads a machine ID in the update 
command and compares the machine ID to the machine 
ID of the first directory D1. In this case, if it is determined 
that both of the machine IDs coincide with each other 
(step C405), further a correlation between the access 
right of the machine ID and the received access is ver- 
ified (step C406) . It should be noted that if it is verified 
that both of the machine IDs do not coincide with each 
other (step C405), this withdrawal transaction is regard- 
ed as invalid and invalidated. 

[0187] When the correlation is verified in step C406, 
the processing further shifts to step C407. If it is deter- 
mined in step C407 that the area read in step C404 is 
the first purse, the processing shifts to step C408 : and 
if not, the processing shifts to step C41 2 and identifica- 
tion is made as to whether the specified mode is a pay- 
ment mode or not. 
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[01 88] When the processing shifts to step C403 in the 
IC card 1 , determination is made as to whether the area 
ID specifies the third purse, namely information on the 
center account or not. According to the above opera- 
tional flow, the area ID is the first purse, so that, in this 5 
case also, this transaction is regarded as invalid and the 
processing is terminated. It it is determined that the third 
purse is specified, the processing further shifts to step 
C409 and authenticates an access right to information 
on the center account. Then, if the ATM is a readable 10 
machine (step C409), an account number is read out in 
step C410, and the account number is outputted to the 
ATM (step C411). After the operations, this transaction 
is ended. 

[0189] If it is determined in step C407 that the area ID is 
specifies the first purse, the processing shifts to step 
C412, and then the demanded contents is determined. 
In the above operational flow, it is determined that the 
demand is a payment. Accordingly, only the processing 
for payment is described in details herein (Refer to Fig. 20 
29, Fig. 30, and Fig. 31) herein, and also it is assumed 
herein that other processing such as Transfer to other 
account or Card deposit are the same as the operations 
of the IC card 1 as described above. 
[0190] In a case of a demand for payment, the 
processing for payment shown in Fig. 12 and Fig. 13 
having been described before is started. The IC card 1 
has already received a code number and a demanded 
amount for payment in step C40T. Accordingly, at first, 
the code number is de-ciphered (step C413), then in 
step C414, a code number stored in the first directory 
D1 is read, and the code number is de-ciphered. 
[0191] Further, verification is made between the de- 
ciphered code number of the IC card itself and the de- 
ciphered code number received from the ATM (step 
C415), and if both of the code numbers coincide with 
each other (step C416), the authorization is regarded as 
successful and the processing shifts to step C417. On 
the other hand, when the authorization is not successful, 
this transaction for payment is regarded as invalid and 
invalidated. 

[0192] Further, the IC card 1 ciphers each balance in 
the first purse area 106A as well as the second purse 
area 106B and sends the ciphered balances to the ATM 
(step C417). 

[0193] The ATM waits for, after the ciphered informa- 
tion is sent in step T41 3, receiving the balances (ci- 
phered information) in the first purse and the second 
purse from the IC card 1 (step T41 4). If the time for wait- 
ing is over the preset period of time, the processing 
shifts to the step for returning a card and is forcefully 
terminated. 

[01 94] The ATM sends, when having received the bal- 
ances (ciphered information) in the first purse and the 
second purse from the IC card 1 within the preset period 
of time (step T414), at first, the code number, informa- 
tion on an account, and the amount to be withdrawn to 
the central system 3 (step T41 6). It should be noted that 



information on an account can be obtained by making 
the IC card 1 execute the step C 408 to step C41 1 . Then, 
the received balances are displayed, as shown in Fig. 
39B, on the CRT/touch panel 601 (step T417). Then, 
the ATM waits for a report on IC card's being payable 
from the central system 3 (step T419). 
[0195] The IC card 1 de-ciphers, after the ciphered 
information is sent in step C41 7, the demanded amount 
for payment having been received (step C418). Then, 
the de-ciphered amount for payment is added to the bal- 
ance stored in the first purse area 106A, and the total 
amount is stored in the work area W2 (step C41 9). Then, 
the system waits for receiving validation code from the 
ATM (step C420). 

[0196] The ATM sends, when having received the re- 
port on IC card's being payable from the central system 
3 (step T418), the validation code to the IC card 1 (step 
T420) according to the operation for checking by the us- 
er (step T41 9). Then, when having received transaction- 
completion signature code from the IC card 1 , the ATM 
executes the processing for preparing historical infor- 
mation on that transaction and the processing in the 
ATM side is ended. 

[0197] In the IC card 1, when the validation code is 
received from the ATM (step C420), the transaction for 
payment is regarded as valid, and the ciphered amount 
of money stored in the work area W2 is stored in the first 
purse area 106A (step C421). As described above, the 
balance in the first purse area 106A is updated accord- 
ing to the amount of money to be paid from the account 
to the IC card. 

[0198] Further, stored in the third purse area 106C is 
information on the date of the transaction for transfer as 
historical information (step C422). Finally, transaction- 
completion signature code is sent to the ATM to report 
that the processing inside the IC card 1 is completed to 
the ATM (step C423). 

[01 99] The processing described above has assumed 
a case of the payment mode from an account to an IC 
card as an example, but if the mode is other one such 
as a payment mode from an account to an IC card as 
well as to cash, or from an IC card to an IC card as well 
as to cash, a display screen shown in Fig. 39C is formed. 
In this case, concerning the purse to which payment is 
made (e.g. the second purse is allowable) or cash, each 
amount of money to be withdrawn can be specified re- 
spectively. 

[0200] Only the balances in the purses are displayed 
on the screen shown in Fig. 39B, but as shown in Fig. 
39D, the balance in an account after completion of a 
transaction may be displayed thereon. 
[0201] As described above, with this embodiment, the 
characteristics as a double-structured purse (IC card) 
are made use of, and for this reason it is possible to 
improve the convenience in use as a prepaid card in the 
second purse with lower security and to further improve 
the security in the first purse with higher security. 
[0202] When the device in the user's side demands 
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the processing for payment without specifying any area, 
it is possible to realize, by using a deposited amount in 
the second purse, a simple and less-secured transac- 
tion which does not require personal authorization. 
[0203] With the IC card 1 , much expense in time and 
effort such that a code number needs to be verified for 
the second purse with lower security is omitted, and for 
this reason convenience in use can be improved and at 
the same time the first purse with higher security can be 
prevented from illegal access by requiring personal au- 
thorization and using a code number. 
[0204] In a transaction between a transaction appa- 
ratus and an IC card, when specification of an arbitrary 
mode is accepted within a preset period of time, using 
a center account is allowed, and when the specification 
is not accepted, the mode is switched to payment in 
cash, so that a transaction through a center account has 
variations in modes, and simplification of the transaction 
in cash can be realized by omitting operations required 
for specifying the transaction in cash. 
[0205] In a transaction requiring personal authoriza- 
tion between a transaction apparatus and an I C card, 
the transaction is executed again by making use of an 
amount of money in the second purse even if the trans- 
action is not performed only through the first purse, so 
that a user can execute a transaction without being con- 
cerned about an amount of money for the transaction, 
and for this reason improvement in the operability can 
be achieved. 

[0206] In a transaction between a transaction appa- 
ratus and an IC card, amounts of money for the first and 
the second purses are outputted to the transaction ap- 
paratus only when the personal authorization is execut- 
ed, and if not, only an amount of money for the second 
purse is outputted to the transaction apparatus, so that 
the first purse with high security can be prevented from 
being opened unless the information can pass through 
the operations for the personal authorization even if a 
transaction is such a small one that contents of the purse 
is let to know to a transaction apparatus for an inquiry 
or the like. 

[0207] Although the description has been made for 
the present invention with Embodiment, it is to be un- 
derstood that various types of modification may be re- 
sorted without departing from the scope of the present 
invention as claimed, and that those modifications are 
not to be excluded from the scope of the present inven- 
tion. 

[0208] As described above, with the electronic purse 
system having a double-structured purse according to 
the present invention, the characteristics as a double- 
structured purse are made use of, and for this reason it 
is possible to obtain an electronic purse system having 
a double-structured purse in which the convenience in 
use as a prepaid card can be improved in a purse with 
lower security, on the other hand, the security can fur- 
ther be improved in a purse with higher security. 
[0209] In the electronic purse system having a dou- 



ble-structured purse according to the present invention, 
a program making the second area allow only the with- 
drawal processing may be stored in the second non-vol- 
atile memory of the card-formed carrier body. 
s [0210] In the electronic purse system having a dou- 
ble-structured purse according to the present invention, 
identification information for a device in the user's side 
and a code number each allowing access to a third area 
are registered in the third area provided in the card- 
io formed carrier body, and addition or subtraction in the 
third area may be allowed when identification informa- 
tion and a code number corresponding to registered in- 
formation are received from the device in the user's side. 
[0211] In the electronic purse system having a double- 
is structured purse according to the present invention, 
identification information indicating the device in the us- 
er's side subjected to addition and an amount of added 
money may be stored as historical information in the 
third area of the card-formed carrier body. 
20 [0212] With the electronic purse system having a dou- 
ble-structured purse according to the present invention, 
it is possible to obtain an electronic purse system having 
a double-structured purse in which, when the device in 
the user's side demands the processing for payment 
25 without specifying any area, a simple and less-secured 
transaction which does not require personal authoriza- 
tion can be realized by using a deposited amount in the 
second area. 

[0213] With the IC card applicable to an electronic 
30 purse system having a double-structured purse accord- 
ing to the present invention, it is possible to obtain an 
IC card applicable to the electronic purse system having 
a double-structured purse in which much expense in 
time and effort such that a code number needs to be 
35 verified for the second purse with lower security is omit- 
ted so that convenience in use can be improved, and at 
the same time the first purse with higher security can be 
prevented from illegal access by requiring personal au- 
thorization. 

40 [0214] With the IC card applicable to an electronic 
purse system having a double-structured purse accord- 
ing to the present invention, it is possible to obtain an 
IC card applicable to the electronic purse system having 
a double-structured purse in which much expense in 

45 time and effort such that a code number needs to be 
verified for the second purse with lower security is omit- 
ted so that convenience in use can be improved, and at 
the same time a function of preventing illegal access can 
further be improved in the first purse with higher security 

50 by using ciphered information. 

[021 5] With the IC card transaction apparatus accord- 
ing to the present invention, in a transaction between a 
transaction apparatus and an IC card, when specifica- 
tion of an arbitrary mode is accepted within a preset pe- 

55 riod of time, using a center account is allowed, and when 
the specification is not accepted, the mode is switched 
to payment in cash, so that it is possible to obtain an IC 
card transaction apparatus in which a transaction 
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through a center account has variations in modes, and 
simplification of the transaction in cash can be realized 
by omitting operations required for specifying the trans- 
action in cash. 

[021 6] With the IC card transaction apparatus accord- s 
ing to the present invention, in a transaction requiring 
personal authorization between a transaction apparatus 
and an IC card, the transaction is executed again by 
making use of an amount of money in the second purse 
even if the transaction is not performed only through the 
first purse, so that it is possible to obtain an IC card 
transaction apparatus in which a user can execute a 
transaction without being concerned about an amount 
of money for the transaction and for this reason improve- 
ment in the operability can be achieved. 
[021 7] With the IC card applicable to an I C card trans- 
action system according to the present invention, in a 
transaction between a transaction apparatus and an IC 
card, amounts ot money for the first and the second 
purses are outputted to the transaction apparatus only 
when the personal authorization is executed, and if not, 
only an amount of money for the second purse is out- 
putted to the transaction apparatus, so that it is possible 
to obtain an I C card applicable to the IC card transaction 
system in which the first purse with high security can be 
prevented from being opened unless the information 
can pass through the operations for the personal author- 
ization even if a transaction is such a small one that con- 
tents of the purse is let to know to a transaction appa- 
ratus for an inquiry or the like. 

[0218] This application is based on Japanese patent 
application No. HEI 9-268891 filed in the Japanese Pat- 
ent Office on October 1 , 1 997, the entire contents of 
which are hereby incorporated by reference. 
[0219] Although the invention has been described 
with respect to a specific embodiment for a complete 
and clear disclosure, the appended claims are not to be 
thus limited but are to be construed as embodying all 
modifications and alternative constructions that may oc- 
cur to one skiHed in the art which fairly fall within the 
basic teaching herein set forth. 



Claims 

1. An electronic purse system having a double-struc- 
tured purse comprising: 

a portable type of card-formed carrier body 
comprising a first rewritable and non-volatile 
memory in turn having a first area in which a 
first deposited amount is stored and a second 
area in which a second deposited amount is 
stored, and an I/O terminal for accessing infor- 
mation stored in said first and second non-vol- 
atile memories respectively; when accessing 
said first area, ciphered information received 
from said I/O terminal is de-ciphered, access is 



permitted i1 a code number included in the de- 
ciphered information satisfies a prespecified 
relation, and when accessing said second area, 
access to said second area is permitted if an 
identification number indicating a type of ac- 
cessible transaction apparatus; 
a withdrawing machine for transferring all or a 
portion of a deposited amount to the first area 
of the memory in said card-formed carrier body, 
which ciphers at least either one of identifica- 
tion information for the apparatus and a code 
number inputted by the card holder and trans- 
fers the ciphered information or number to said 
card-formed carrier body; 
an input unit for inputting a code number and a 
amount of money to be transferred from said 
first area to said second area in said card- 
formed carrier body; 

a transfer unit for supplying the code number, 
amount of money to be transferred, and identi- 
fication information inputted by said input unit 
to said card-formed carrier body; and 
a device in the user's side for transmitting an 
amount of money used and the apparatus in- 
formation to use a deposited amount stored in 
the second area of said card-formed carrier 
body; wherein said card-formed carrier body 
updates said first area, when transfer is in- 
structed by said transfer unit and said individu- 
al's authorization number is accepted, by sub- 
tracting a specified amount of money from the 
deposited amount stored in said first area, and 
also writes the specified amount of money in 
said second area, and allows, when an amount 
of money to be used is instructed from said de- 
vice in the user's side and at the same time ac- 
cess to said second area is permitted according 
to said identification information, use of the in- 
structed amount of money with said device in 
the user's side by subtracting said amount of 
money to be used. 

2. An electronic purse system having a double-struc- 
tured purse according to claim 1; wherein said card- 
formed carrier body has a program making said sec- 
ond area allow only the withdrawal processing 
stored in said second non-volatile memory. 

3. An electronic purse system having a double-struc- 
tured purse according to claim 1 ; wherein said card- 
formed carrier body has further a third area in said 
first non-volatile memory with identification informa- 
tion for a device in the user's side and a code 
number each allowing access to said third area reg- 
istered in said third area, and a program for allowing 
addition or subtraction in said third area when iden- 
tification information and a code number corre- 
sponding to information registered from said device 
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jn the user's side are inputted is stored in said sec- 
ond non -volatile memory. 

4. An electronic purse system having a double-struc- 
tured purse according to claim 3; wherein said card- 
formed carrier body stores in said third area identi- 
fication information indicating said device in the us- 
er's side subjected to addition and an amount of 
added money as historical information. 

5. An electronic purse system having a double-struc- 
tured purse according to claim 2; wherein said card- 
formed carrier body skips, when said device in the 
user's side demands payment without specifying 
any area in said first non-volatile memory, the 
processing for de-ciphering the transferred informa- 
tion from said device in the user's side, and allows 
transaction for subtracting information on the spec- 
ified amount of money from said second deposited 
amount. 

6. An IC card applicable to an electronic purse system 
having a double-structured purse comprising: 

a memory in which a first purse with a first 
amount of money stored therein, a second 
purse with a second amount of money stored 
therein, a payment processing program and ci- 
pher program are stored; 
processor for executing said payment process- 
ing program and cipher program; 
communicating means for executing communi- 
cations with external devices; 
wherein according to said payment processing 
program, said processor takes a steps of; 
distinguishing said external device communi- 
cating between first type of transaction using 
only said second purse being allowed and sec- 
ond type of transaction using both of said first 
and said second purse being allowed; 
executing payment processing program with ci- 
phering at least a part of communication data 
for said external device being allowed to pro- 
ceed said second type of transaction during the 
payment transaction; and 
executing payment processing program with- 
out ciphering communication data for said ex- 
ternal device being allowed to proceed said first 
type of the transaction. 

7. An IC card applicable to an electronic purse system 
having double-structured purse according to claim 
6, further comprising: 

said memory storing key information in a read 
protection area protected to read from said ex- 
ternal device for said cipher program which is 
commonly embodied in the authorized external 



42 

devices for the electric money transaction; and 
said cipher program ciphering the transaction 
data using said key information stored said 
memory. 
5 

8. An IC card applicable to an electronic purse system 
having a double-structured purse comprising: 

a memory in which a first purse with a first 
70 amount of money stored therein, a second 

purse with a second amount of money stored 
therein, and a payment processing program are 
stored; 

a processor for executing payment processing 
15 according to the payment processing program 

stored in said memory; 

a communicating unit for executing communi- 
cations with external devices; wherein said 
payment program executes payment process- 
20 ing according to the second amount of money 

stored in said second purse when a payment 
command is received from an external payment 
demanding device without any purse being 
specified, and executes the payment process- 
es ing to said external device according to the 
amount of money stored in said first purse when 
a payment command based on specification of 
said first purse is received. 

30 9. An I C card applicable to an electronic purse system 
having a double-structured purse comprising: 

a memory in which a first purse with a first 
amount of money stored therein, a second 
purse with a second amount of money stored 
therein, a payment processing program, and an 
ciphering/de-ciphering program are stored; 
a processor for executing payment processing 
according to the payment processing program 
stored in said memory; 

a communicating unit for executing communi- 
cations with external devices; and 
an interface for managing interface with exter- 
na! transaction devices; wherein said payment 
program executes the payment processing ac- 
cording to the second amount of money stored 
in said second purse when a payment com- 
mand not based on specification of the first 
purse is received via said interface from an ex- 
ternal device, and communicates with the ex- 
ternal device using said ciphering and de-ci- 
phering program and executes the payment 
processing to said external device according to 
the amount of money stored in said first purse 
when a payment command based on specifica- 
tion of said first purse is received. 

10. An IC card transaction apparatus for selecting ei- 
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ther one of an amount of money stored in an I C card 
and an amount of money stored in a center account 
and executing payment in cash according to the se- 
lected amount of money comprising: 

5 

a detector for detecting insertion of an I C card; 
an acceptor for accepting specification of an ar- 
bitrary mode after insertion of said IC card is 
detected by said detector, and 
a mode switch for switching from said center to 
account to a mode for payment in cash when 
specification of an arbitrary mode is not accept- 
ed in said acceptor within a preset period of 
time after insertion of said IC card is detected. 

15 

11. A transaction apparatus for executing transaction 
with an IC card having a first purse and a second 
purse; wherein said transaction apparatus exe- 
cutes transaction making use of the amount of mon- 
ey stored in said second purse, when a demand for 20 
payment is received based on specification of said 
first purse, if. it is turned out, after the demand for 
payment is authorized according to the ciphered in- 
formation and code number, that the amount of 
money stored in said first purse is less than the 25 
amount of money required for the transaction. 

12. An IC card applicable to an IC card transaction sys- 
tem, said card having a first purse and a second 
purse and used for transaction making use of the 30 
double-structured purse consisting of said first 
purse and second purse with the transaction appa- 
ratus; wherein, when a code number is received 
from the transaction apparatus : the processing for 
authorizing the individual is executed with said re- 35 
ceived code number and amounts of money to be 
stored in said first and second purses respectively 
are outputted to said transaction apparatus, and on 

the other hand, when a code number is not received 
from said transaction apparatus, an amount of mon- 40 
ey for said second purse is outputted to said trans- 
action apparatus. 
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